The CIS Critical Security Controls (CIS Controls) are a prioritized set of cybersecurity best practices and defensive actions designed to protect organizations from the most prevalent cyber attacks. Developed and maintained by the Center for Internet Security (CIS), these controls represent the collective knowledge of cybersecurity experts worldwide and provide a practical framework for implementing essential security measures.