[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F1":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","1","Control 1","Inventory and Control of Enterprise Assets",242,"Center for Internet Security (CIS)","**What it asks for.** Organisations should know every device that connects to their environment, whether physical, virtual, remote or cloud based, and act on anything that is unknown or unauthorised. The aim is that only managed assets have access, so that nothing escapes patching, monitoring or response.\n\n**In practice.** A good programme keeps one authoritative inventory fed by several sources, such as DHCP logs, endpoint agents, network scans, cloud APIs and the MDM platform, and records owner, location and purpose for each asset. Unknown devices are reviewed on a fixed cadence and either enrolled, quarantined or removed. Auditors usually ask for the inventory itself, evidence of reconciliation between sources and tickets showing how rogue devices were handled.\n\n**Common gaps.** Inventories often cover corporate laptops and servers but miss cloud workloads, IoT, OT and personal devices on guest networks. Many are also snapshots that go stale because nobody owns the reconciliation.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Finventory-and-control-of-enterprise-assets","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"vodafone-spain-fined-400k-after-ignoring-known-vulnerability-for-months","Vodafone Spain Fined €400K After Ignoring Known Vulnerability for Months","2026-10-16T12:20:31.802+00:00",{"slug":23,"title":24,"published_at":25},"hard-coded-credentials-in-eseecloud-ip-cameras-leave-users-exposed","Hard-Coded Credentials in EseeCloud IP Cameras Leave Users Exposed","2026-10-15T18:21:38.566+00:00",{"slug":27,"title":28,"published_at":29},"small-ai-models-could-enable-self-propagating-ai-worms-by-2026","Small AI Models Could Enable Self-Propagating AI Worms by 2026","2026-10-15T14:20:39.044+00:00",{"slug":31,"title":32,"published_at":33},"end-of-life-ot-devices-enable-supermarket-refrigeration-cyberattack","End-of-Life OT Devices Enable Supermarket Refrigeration Cyberattack","2026-10-15T14:20:22.449+00:00",{"slug":35,"title":36,"published_at":37},"unpatched-fridge-firmware-costs-eu-grocers-millions","Unpatched Fridge Firmware Costs EU Grocers Millions","2026-10-15T08:20:19.544+00:00",{"slug":39,"title":40,"published_at":41},"self-replicating-ai-models-pose-emerging-botnet-threat-to-iot-devices","Self-Replicating AI Models Pose Emerging Botnet Threat to IoT Devices","2026-10-13T22:21:14.479+00:00",{"slug":43,"title":44,"published_at":45},"ai-powered-self-propagating-iot-botnets-a-rapidly-emerging-threat","AI-Powered Self-Propagating IoT Botnets: A Rapidly Emerging Threat","2026-10-13T20:21:17.938+00:00",{"slug":47,"title":48,"published_at":49},"swann-security-cameras-expose-live-feeds-due-to-missing-authentication","Swann Security Cameras Expose Live Feeds Due to Missing Authentication","2026-10-13T16:22:01.797+00:00",{"slug":51,"title":52,"published_at":53},"legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","2026-10-13T14:21:25.902+00:00",{"slug":55,"title":56,"published_at":57},"ai-self-replication-on-iot-devices-a-looming-worm-threat","AI Self-Replication on IoT Devices: A Looming Worm Threat","2026-10-13T14:21:07.191+00:00",{"slug":59,"title":60,"published_at":61},"lg-webos-pre-auth-root-flaw-highlights-iot-device-risks-on-local-networks","LG webOS Pre-Auth Root Flaw Highlights IoT Device Risks on Local Networks","2026-10-13T12:21:15.988+00:00",{"slug":63,"title":64,"published_at":65},"refrigeration-controller-vulnerabilities-enable-remote-supermarket-attacks","Refrigeration Controller Vulnerabilities Enable Remote Supermarket Attacks","2026-10-13T10:21:18.66+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",133,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",111,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",61,{"slug":83,"name":84,"problem":85,"stories":86},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",53,{"slug":88,"name":89,"problem":90,"stories":91},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",50,{"slug":93,"name":94,"problem":95,"stories":96},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",39,[98,103,108,113,118,124,128,134],{"family":5,"item":99,"code":100,"title":101,"together":102},"7","Control 7","Continuous Vulnerability Management",163,{"family":5,"item":104,"code":105,"title":106,"together":107},"12","Control 12","Network Infrastructure Management",127,{"family":109,"item":110,"code":111,"title":112,"together":76},"nist-800-53","si-2","SI-2","Flaw Remediation",{"family":114,"item":115,"code":116,"title":116,"together":117},"itil","overview","ITIL",64,{"family":119,"item":120,"code":121,"title":122,"together":123},"nist-sp","800-82","SP 800-82","SP 800-82 Rev. 3: Guide to Operational Technology (OT) Security",57,{"family":5,"item":125,"code":126,"title":127,"together":123},"13","Control 13","Network Monitoring and Defense",{"family":129,"item":130,"code":131,"title":132,"together":133},"gdpr","32","Article 32","Security of processing",51,{"family":109,"item":135,"code":136,"title":137,"together":138},"sc-7","SC-7","Boundary Protection",46]