The CIS Critical Security Control (CSC) contains information as defined by the Center for Internet Security Critical Security Control (CIS CSC). Prioritized set of actions to protect your organization and data from cyber-attack vectors.

Attributes

CaptionNameTypeDescription
Security Control control String A Control is prescriptive, prioritized, and simplified set of best practices that one can use to strengthen their cybersecurity posture. e.g. AWS SecurityHub Controls, CIS Controls.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Unmapped Data unmapped Unmapped[] The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
Version version String The CIS critical security control version.

Relationships

CIS CSC shown in context

Inbound Relationships

These objects and events reference CIS CSC in their attributes:

Outbound Relationships

CIS CSC references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0