CIS 18: A Global Standard For CyberSecurity
The Center for Internet Security (CIS) has long been recognized as a leader in developing controls, practices, and resources to protect data and organizations from cyber threats. The CIS 20 controls were a benchmark framework that was adopted globally by organizations to protect their digital assets and resources. In 2021, CIS updated this framework with the release of Version 8 (v8) and CIS 20 is now CIS 18.
CIS 18 Controls were designed to address the threats organizations face today and to better fit the design and implementation of modern information systems. It presents 18 top-level Controls and 153 Safeguards that are organized into three implementation groups to fit your organization whatever its size and needs.
CyberCompass has always had a holistic approach to build cyber resilience across your business ecosystem. Our automated platform allows us to quickly assess your business against CIS 18 and to create a Risk Management Plan to correct vulnerabilities.
About CIS 18
CyberCompass has implemented all three implementation groups, IG1, IG2 and IG3 of the CIS 18 Controls in the platform. We have also created IG1.5 for companies in between the IG1 and IG2 needs

It has greatly improved our ability to keep our compliance manuals, projects, audits and policies organized. Having a one-stop place for everything compliance related is fantastic.
Richard Hughes, South Texas Spinal Clinic
CyberCompass gets you compliant quickly and affordably. By combining multiple assessments into a single survey, you can reduce your man-hours while increasing the accuracy of your results. With the guidance of our certified Commander and the automated power of CyberCompass, you can begin correcting your vulnerabilities and building your cyber resilience.
- Answer one set of simple yes/no questions that meet CIS 18 regulations
- Take the survey on your schedule. Start and stop as needed and CyberCompass saves your progress.
- Gain visibility of your vulnerabilities and top priorities to correct first
- Our step-by-step guide helps you fix issues and get compliant quickly
- Save all important documentation in our encrypted vault
- Cybersecurity awareness training included through CyberCompass Academy
- Monitor your compliance for 12 months
