CIS Controls v8.1
Center for Internet Security Controls v8.1 - comprehensive security framework covering IG1 and IG2 safeguards for SMBs
Security Binder turns plain-language answers into these 23 documents, with CIS Controls v8.1 control alignment layered into each. You get the finished prose plus a polished PDF, DOCX, or Markdown export.
Policies
Acceptable Use Policy
Set clear rules for how employees and contractors may use company systems, devices, and data. Commonly requested for cyber insurance and compliance programs.
Account & Access Control Policy
Define how user accounts, service accounts, and authentication systems are inventoried, managed, and secured.
Asset & Software Inventory Policy
Define how hardware, software, SaaS, cloud, and data-processing assets are inventoried, owned, reviewed, and retired.
Audit Log Management Policy
Define what events are logged, how logs are collected, stored, reviewed, and retained to support security monitoring and incident investigation.
Change Management Policy
Define how technology, security, vendor, and production changes are requested, approved, tested, implemented, and reviewed.
Cryptography & Key Management Policy
Define requirements for encryption, cryptographic protocols, key ownership, storage, rotation, access, and recovery.
Data Management Policy
Define how your organization inventories, classifies, handles, retains, and disposes of data across all systems and storage locations.
Information Security Policy
The overarching policy that defines your organization's commitment to protecting information assets, establishes security principles, and assigns responsibilities.
Secure Configuration Policy
Establish and maintain secure configuration baselines for enterprise assets and network infrastructure to reduce attack surface.
Secure Software Development Policy
Define security requirements and practices for application development, including secure coding standards, vulnerability management, and code review.
Vendor & Service Provider Management Policy
Define how your organization evaluates, monitors, and manages the security posture of third-party service providers and vendors.
Plans
Business Continuity Plan
Plan how critical business functions keep running during outages, disasters, and IT failures, with recovery teams and communication steps.
Disaster Recovery Plan
Prepare for and recover from events that disrupt critical IT systems and infrastructure
Incident Response Plan
Define how your team detects, contains, and recovers from security incidents, with roles, timelines, and communication steps.
Network Architecture Plan
Document your network architecture, segmentation strategy, and security boundaries to maintain visibility and control over network traffic.
Penetration Testing Plan
Define the scope, cadence, and methodology for penetration testing to identify exploitable vulnerabilities before attackers do.
Security Awareness & Training Plan
Establish a security awareness program that trains employees to recognize and respond to cybersecurity threats through regular education and simulated exercises.
Vulnerability Management Plan
Define how your organization identifies, prioritizes, and remediates vulnerabilities across enterprise assets and software.
Assessments
CIS IG1 Assessment - Essential Cyber Hygiene
Assess your implementation of the 56 CIS IG1 safeguards that represent essential cyber hygiene every organization should implement regardless of size or industry.
CIS IG2 Assessment - Expanded Controls
Assess the 74 additional CIS IG2 safeguards for organizations with IT staff responsible for managing and protecting sensitive data and infrastructure.
CIS IG3 Assessment - Advanced Controls
Assess the 23 advanced CIS IG3 safeguards for organizations with dedicated security teams protecting high-value assets against sophisticated threats.
Risk Assessment
Identify, rank, and plan treatment for cybersecurity risks across your organization, with assets, threats, and controls in one assessment.
Scoping
Environment Profile
Describe your technology environment so plans and assessments match how your organization actually runs (cloud, identity, endpoints, and obligations).
Build your CIS Controls v8.1 documents without a consultant.
Answer plain-language questions; Security Binder writes the documents and exports them ready to share.
Get started