Display event - CIS Top 18 Critical Security Controls (Webinar)

Go back to full list.

CIS Top 18 Critical Security Controls (Webinar)

September 20, 2023
10am-11am

Member Fee (Live or Recording): $150 per connection
Non-Member Fee (Live or Recording): $250 per connection

In this heavily regulated industry, there is no shortage of guidance on how financial institutions should implement security controls. While the FFIEC provides the ultimate source of guidance for banks, proactive institutions looking to enhance their controls to address evolving risks should reference other sources of guidance and frameworks for mitigating cybersecurity risks. In this webinar, we will focus on the Center for Internet Security’s (CIS) globally recognized Top 18 Critical Security Controls and why this framework can be an effective option to layer on top of FFIEC recommendations.

The framework breaks each control into three implementation groups based on the risk profile of an organization and the resources it has available. We’ll provide an overview of all controls, with a focus on the more advanced protections within Implementation Groups 2 and 3.

Learning objectives:

Identify various control frameworks available to banks and why the CIS Top 18 Critical Security Controls can be an effective option to layer on FFIEC recommendations
Examine various controls in Implementation Groups 2 and 3 of the CIS framework
Apply these controls within your institution to mitigate risks

provides IT audit, consulting and training services to financial institutions, medical entities, CPA firms and their clients. The Firm has been providing services in the IT area since 1999 and each year performs hundreds of audit, consulting and speaking engagements with a team of experienced professionals retaining numerous certifications, including CPA, CISA, CITP, CGMA and CTGA. For every engagement, the staff of highly trained professionals tailors the work for the unique makeup, size and complexity of the organization and information and reports are presented in a concise manner, making them easy to understand by those having a variety of IT expertise.