CIS Controls
What can be seen from outside for each CIS Controls v8.1 safeguard, measured across the public domains of the Arabian Gulf, as visible evidence for the safeguard and not a full assessment of it.
CIS Controls
This page ties what the baseline measures to the CIS Controls many organisations in the Arabian Gulf work with, so each team reads its state's figures in the language of the framework it already uses.
CIS Controls in the Arabian Gulf
Each figure is the share meeting the visible evidence, and it does not mean the safeguard is met, since most of what it asks happens inside and cannot be seen from outside.
9.5 Implement DMARC
Implementation Group 2 CIS 9 Email and Web Browser Protections
- 18.9% DMARC enforced 2,250 of 11,908
- 69.8% SPF in place 8,312 of 11,907
3.10 Encrypt Sensitive Data in Transit
Implementation Group 2 CIS 3 Data Protection
- 92.0% Valid HTTPS 9,303 of 10,117
- 18.6% HSTS for a year or more 1,884 of 10,117
- 86.5% TLS 1.3 supported 8,750 of 10,117
- 67.8% No TLS 1.0 or 1.1 6,656 of 9,817
- 52.2% Post quantum ready 5,280 of 10,111
- 0.5% MTA-STS enforced 50 of 9,338
16.2 Establish and Maintain a Process to Accept and Address Software Vulnerabilities
Implementation Group 2 CIS 16 Application Software Security
- 2.1% security.txt published 214 of 10,109
2.2 Ensure Authorized Software is Currently Supported
Implementation Group 1 CIS 2 Inventory and Control of Software Assets
- 77.0% Announce a version still supported 2,391 of 3,106 websites
7.4 Perform Automated Application Patch Management
Implementation Group 1 CIS 7 Continuous Vulnerability Management
- 71.9% On the latest release of their support cycle 2,232 of 3,106 websites
7.7 Remediate Detected Vulnerabilities
Implementation Group 2 CIS 7 Continuous Vulnerability Management
- 95.8% Announce no version hit by an exploited vulnerability 1,711 of 1,786 websites
CIS Controls® by the Center for Internet Security, Inc. Safeguard numbers, titles and Implementation Groups are used as CIS publishes them, unchanged, under CC BY-NC-ND 4.0. The CIS Controls on the CIS site The licence