[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F1":3},{"item":4,"lessons":16,"controls":67,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","1","Control 1","Inventory and Control of Enterprise Assets",242,"Center for Internet Security (CIS)","**What it asks for.** Organisations should know every device that connects to their environment, whether physical, virtual, remote or cloud based, and act on anything that is unknown or unauthorised. The aim is that only managed assets have access, so that nothing escapes patching, monitoring or response.\n\n**In practice.** A good programme keeps one authoritative inventory fed by several sources, such as DHCP logs, endpoint agents, network scans, cloud APIs and the MDM platform, and records owner, location and purpose for each asset. Unknown devices are reviewed on a fixed cadence and either enrolled, quarantined or removed. Auditors usually ask for the inventory itself, evidence of reconciliation between sources and tickets showing how rogue devices were handled.\n\n**Common gaps.** Inventories often cover corporate laptops and servers but miss cloud workloads, IoT, OT and personal devices on guest networks. Many are also snapshots that go stale because nobody owns the reconciliation.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Finventory-and-control-of-enterprise-assets","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},273,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"actively-exploited-vulnerabilities-added-to-cisa-kev-catalog-demand-immediate-remediation","Actively Exploited Vulnerabilities Added to CISA KEV Catalog Demand Immediate Remediation","2026-11-13T21:21:21.381+00:00",{"slug":24,"title":25,"published_at":26},"exposed-camera-software-exploited-to-mine-cryptocurrency-across-13-organizations","Exposed Camera Software Exploited to Mine Cryptocurrency Across 13 Organizations","2026-11-13T21:21:00.22+00:00",{"slug":28,"title":29,"published_at":30},"maersk-ransomware-hit-stems-from-unretired-legacy-system-inherited-in-acquisition","Maersk Ransomware Hit Stems from Unretired Legacy System Inherited in Acquisition","2026-11-12T19:20:58.818+00:00",{"slug":32,"title":33,"published_at":34},"open-source-ai-pentest-tool-weaponized-against-critical-sector-organizations","Open-Source AI Pentest Tool Weaponized Against Critical-Sector Organizations","2026-11-12T16:21:40.466+00:00",{"slug":36,"title":37,"published_at":38},"legacy-acquisition-system-exposes-maersk-to-data-theft-and-extortion","Legacy Acquisition System Exposes Maersk to Data Theft and Extortion","2026-11-12T11:20:57.065+00:00",{"slug":40,"title":41,"published_at":42},"acquired-it-systems-become-a-data-breach-vector-for-maersk","Acquired IT Systems Become a Data Breach Vector for Maersk","2026-11-12T09:20:20.555+00:00",{"slug":44,"title":45,"published_at":46},"legacy-system-from-acquisition-becomes-entry-point-for-5m-ransomware-demand","Legacy System from Acquisition Becomes Entry Point for $5M Ransomware Demand","2026-11-11T22:20:43.504+00:00",{"slug":48,"title":49,"published_at":50},"legacy-systems-from-acquisitions-become-ransomware-entry-points","Legacy Systems from Acquisitions Become Ransomware Entry Points","2026-11-11T17:20:40.584+00:00",{"slug":52,"title":53,"published_at":54},"exposed-refrigeration-controllers-hijacked-for-spam-and-proxy-botnets","Exposed Refrigeration Controllers Hijacked for Spam and Proxy Botnets","2026-11-09T15:20:21.516+00:00",{"slug":56,"title":57,"published_at":58},"expanding-attack-surface-requires-a-proactive-risk-operations-model","Expanding Attack Surface Requires a Proactive Risk Operations Model","2026-11-09T14:20:21.381+00:00",{"slug":60,"title":61,"published_at":62},"refrigeration-cyberattacks-and-botnet-compromises-expose-ot-and-iot-blind-spots","Refrigeration Cyberattacks and Botnet Compromises Expose OT and IoT Blind Spots","2026-11-08T10:20:26.939+00:00",{"slug":64,"title":65,"published_at":66},"iot-fridges-hacked-weak-passwords-and-unpatched-controllers-spoil-food-and-safety","IoT Fridges Hacked: Weak Passwords and Unpatched Controllers Spoil Food and Safety","2026-11-07T14:20:24.488+00:00",[68,73,78,83,88,93],{"slug":69,"name":70,"problem":71,"stories":72},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",144,{"slug":74,"name":75,"problem":76,"stories":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",117,{"slug":79,"name":80,"problem":81,"stories":82},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",66,{"slug":84,"name":85,"problem":86,"stories":87},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",61,{"slug":89,"name":90,"problem":91,"stories":92},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",53,{"slug":94,"name":95,"problem":96,"stories":97},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",47,[99,104,110,115,120,126,130,136],{"family":5,"item":100,"code":101,"title":102,"together":103},"7","Control 7","Continuous Vulnerability Management",180,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-800-53","si-2","SI-2","Flaw Remediation",134,{"family":5,"item":111,"code":112,"title":113,"together":114},"12","Control 12","Network Infrastructure Management",128,{"family":116,"item":117,"code":118,"title":118,"together":119},"itil","overview","ITIL",64,{"family":121,"item":122,"code":123,"title":124,"together":125},"gdpr","32","Article 32","Security of processing",58,{"family":5,"item":127,"code":128,"title":129,"together":125},"13","Control 13","Network Monitoring and Defense",{"family":131,"item":132,"code":133,"title":134,"together":135},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",57,{"family":105,"item":137,"code":138,"title":139,"together":140},"sc-7","SC-7","Boundary Protection",46]