I. Define what the Center for Internet Security (CIS) is and their purpose for assisting with cyberattacks and methods to control them through the Multi-State Information Sharing and Analysis Center (MS-ISAC).
II. Examine the U.S. National Security Agency (NSA) approach as they apply an “offense must inform defense” so that controls are implemented backed on a prioritization model with intentions to block actual threats and not generate compliance documentation.
III. Review the three level of controls that the CIS established to create a framework that emphasized standardized approaches and automation wherever possible or practical.