CIS Control
cis_control
The CIS Control (aka Critical Security Control) object describes a prioritized set of actions to protect your organization and data from cyber-attack vectors. The CIS Controls are defined by the Center for Internet Security.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Description | desc | String | The CIS Control description. For example: Uninstall or disable unnecessary services on enterprise assets and software, such as an unused file sharing service, web application module, or service function. |
| Name | name | String | The CIS Control name. For example: 4.8 Uninstall or Disable Unnecessary Services on Enterprise Assets and Software. |
| Raw Data | raw_data | JSON | Group:contextThe event data as received from the event source. |
| Record ID | record_id | String | Group:primaryUnique identifier for the object |
| Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
| Version | version | String | The CIS Control version. For example: v8. |
Relationships
Inbound Relationships
These objects and events reference CIS Control in their attributes:
Outbound Relationships
CIS Control references the following objects and events in its attributes:
This page describes qdm-1.5.1+ocsf-1.6.0