The Center for Internet Security (CIS) published the CIS Critical Security Controls (CSC) to help organizations better defend against known attacks by distilling key security concepts into actionable controls to achieve greater overall cybersecurity defense.

______ Is to layer multiple, varied security controls across physical, technical, and administrative domains, creating redundancy so that if one layer of defense fails, others remain to stop or slow an attack.

Is a central model for developing effective security policies and controls within organizations.

Establishes the rules, responsibilities, and processes necessary to protect an organization’s information assets. It ensures that cybersecurity efforts align with the organization’s goals and comply with legal and regulatory requirements.

_______ Is a structured approach to categorizing personal data within an organization based on its sensitivity, value, and regulatory requirements. This policy helps organizations identify, handle, and protect data effectively, ensuring compliance with GDPR and other data protection regulations.

Requires every person and every device that accesses a network must be secured regardless if it is within the organization or outside of it.

______ Is a set of guidelines developed by the U.S. National Institute of Standards and Technology (NIST) to help organizations manage and mitigate cybersecurity risks. It draws from existing standards, guidelines, and best practices to provide a flexible and scalable approach to cybersecurity. The framework provides a high-level taxonomy of cybersecurity outcomes and offers a methodology for assessing and managing those outcomes

_______ Emphasizes the importance of identifying and assessing information security risks. Organizations are required to implement risk management processes to identify potential threats, evaluate their impact, and develop appropriate mitigation strategies

AI privacy refers to how artificial intelligence systems collect, store, and use personal data. Key concerns include surveillance, data misuse, and lack of transparency. Laws like GDPR and CCPA aim to protect users but enforcement varies.

Outlines moral principals for professionals, emphasizing principals like Honesty, Confidentiality, Integrity, and societal well-being to guide ethical decision-making and protect data, systems, and networks from harm.