Governance, risk & compliance
CIS Controls v8 8.1
Center for Internet Security Critical Security Controls Version 8.
1. Community-developed set of 18 prioritized Controls containing 153 Safeguards (56 of them in IG1) to mitigate the most prevalent cyber-attacks.
Three Implementation Groups (IGs): IG1 (essential cyber hygiene for small/medium orgs), IG2 (for enterprises with IT staff managing moderate complexity), IG3 (for organizations with dedicated security experts). Widely referenced by insurance underwriters, MSPs, and as a practical implementation guide for NIST CSF.
Assessment tiers & levels Lavawall supports
Lavawall assesses CIS Controls v8 at every level below, so you can start where you are and step up as your program matures.
| Tier / level | What it covers | Builds on lower |
|---|---|---|
| Implementation Group 1 | Basic cyber hygiene - essential controls for all organizations. Focus on preventing wide-spread attacks and common exploits. | — |
| Implementation Group 2 | Foundational controls for organizations with more resources and elevated risk profiles. Includes all IG1 controls plus additional defenses. | Yes |
| Implementation Group 3 | Advanced controls for organizations with significant resources and high-value assets requiring protection against sophisticated attacks. | Yes |
How Lavawall® helps you get to CIS Controls v8 compliance
Most of CIS Controls v8 comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to CIS Controls v8, and tracks your posture continuously instead of once a year at audit time.
- Assess your current state against CIS Controls v8 in the Lavawall GRC module, with the questionnaire and control set built in.
- Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
- Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.
Training courses for CIS Controls v8
The Lavawall® training catalogue has a course that covers it. Assign it to the people it applies to and keep the completion records with the rest of your compliance evidence.
- CIS Controls v8.1: Implementation Essentials (38 min)
See this course in the training catalogue →
Related
Lavawall® supports CIS Controls v8 as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.
At a glance
- Framework
- CIS Controls v8 8.1
- Category
- Security
- Region
- Global
- Levels
- 3 assessment tiers
Map this framework freeTalk to our team