In Episode 165 of Cybersecurity Where You Are, Tony Sager sits down with Valecia Stocchetti, Senior Cybersecurity Engineer at the Center for Internet Security® (CIS®), and <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/in/charity-otwell">Charity Otwell</a>, Director of Critical Security Controls at CIS. Together, they take an in-depth look at implementing the <a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/controls?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-lp_view">CIS Critical Security Controls® (CIS Controls®)</a>, including what you need to know to begin your own CIS Controls implementation efforts.Here are some highlights from our episode:<ul><li>00:53. Introductions to Valecia and Charity</li><li>02:48. How the CIS Controls ecosystem answers the deeper question of how to implement</li><li>06:42. The importance of clear strategy, business priorities, and a realistic timeline</li><li>09:56. How the CIS Community Defense Model (CDM) clarifies cyber defense priorities</li><li>13:01. The use of calculations around costing to make a security program achievable</li><li>15:31. Bringing IT and the Board of Directors together through governance</li><li>20:36. "Herding cats" as a metaphor for navigating different compliance frameworks</li><li>23:17. Why one prescriptive ask per CIS Safeguard starts cybersecurity workflows</li><li>25:30. "Why" vs. "how" communication, accountability, staffing, budget, and continuous improvement as keys to success for CIS Controls implementation</li><li>42:03. CIS Controls Assessment Specification as an answer to implementation subjectivity</li><li>47:21. Parting thoughts around team effort, change, and CIS Controls Accreditation</li></ul>Resources<ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/cis-controls-v8-1-cloud-companion-guide?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-controls_dl">Cloud Companion Guide for CIS Controls v8.1</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/cis-community-defense-model-2-0?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-controls_dl">CIS Community Defense Model 2.0</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/the-cost-of-cyber-defense-cis-controls-ig1?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-controls_dl">The Cost of Cyber Defense CIS Controls IG1</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-132-day-one-step-one-dollar-one-for-cybersecurity?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_165-wistia-podcast_sub">Episode 132: Day One, Step One, Dollar One for Cybersecurity</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/controls/policy-templates?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-lp_view">Policy Templates</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-107-continuous-improvement-via-secure-by-design?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_165-wistia-podcast_sub">Episode 107: Continuous Improvement via Secure by Design</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/white-papers/reasonable-cybersecurity-guide?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-controls_dl">Reasonable Cybersecurity Guide</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/controls/resources?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-lp_view">CIS Controls Resources</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/controls/cis-controls-assessment-specification?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-lp_view">CIS Controls Assessment Specification</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-156-how-cis-uses-cis-products-and-services?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_165-wistia-podcast_sub">Episode 156: How CIS Uses CIS Products and Services</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/cis-securesuite/pricing-and-categories/services-and-consulting/cis-controls-accreditation?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-lp_view">CIS Controls Accreditation</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/cis-securesuite/pricing-and-categories/services-and-consulting/cis-controls-accreditation/controls-accreditation?utm_source=wistia&utm_campaign=controls&utm_medium=audio&utm_term=theme_rcs&utm_content=2025-controls-podcast_165-wistia-lp_view">Controls Accreditation</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisecurity.org/insights/podcast/episode-102-the-sporty-rigor-of-cis-controls-accreditation?utm_source=wistia&utm_campaign=cis&utm_medium=audio&utm_term=theme_tl&utm_content=2025-cis-podcast_165-wistia-podcast_sub">Episode 102: The Sporty Rigor of CIS Controls Accreditation</a></li></ul>If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing&nbsp;<a rel="noreferrer noopener" target="_blank" href="mailto:podcast@cisecurity.org">podcast@cisecurity.org</a>.

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

Episode 165: An In-Depth Look at CIS Controls Implementation

Cybersecurity Where You Are (video)

AI Chapters

AI Insights

Reviews