Solution Brief | Addressing CIS Controls with Check Point SASE
Learn how Check Point SASE helps organizations align with CIS Controls through Zero Trust access, secure internet connectivity, threat prevention, and visibility. Strengthen cyber security, reduce risk, support compliance initiatives, and protect hybrid work environments.
Follow UsAll rights reserved. Harmony SASE | 2024
CIS Control Summary of Harmony SASE Capabilities CIS Safeguards supported
Inventory and Control of Enterprise Assets
• Monitoring & reporting on managed devices
• Device posture check 1.1-1.2
Inventory and Control of Software Assets
• Determine access rules for on-prem & cloud applications
• Identify the use of unauthorized apps • Limit app access to only authorized users
2.1, 2.3, 2.5
Data Protection • Enable least privilege • Enforce disk encryption • Set up encrypted tunnels
3.3, 3.6, 3.10
Secure Configuration of Enterprise Assets and Software
• Cloud-based firewall • Private DNS configuration • On-device agent
4.4, 4.5, 4.9
Account Management • User/admin inventory 5.1
How Organizations Use Harmony SASE to Address CIS Controls
The Center for Internet Security (CIS) Critical Security Controls are designed to provide pragmatic, actionable recommendations for improving an organization’s cybersecurity preparedness. Since being first published in 2008, the CIS Controls have been regularly updated, with version 8 released in 2021. Each of the 18 Controls is broken down into several Safeguards, which help address specific aspects of an organization’s security program.
Addressing CIS Controls with Harmony SASE
By implementing the CIS Controls, organizations are better able to defend against today’s threats and can mitigate the impact of a cyberattack. Harmony SASE provides a robust networking and security platform that enables stronger adherence to the CIS Controls. Specifically, the Harmony SASE platform satisfies more than 35 CIS Controls and Safeguards, in full or partially, as summarized in the table below.
Follow UsAll rights reserved. Harmony SASE | 2024
Beyond CIS Controls Many security and compliance frameworks overlap with common principles of the CIS Controls, such as access controls, malware defense, logging, and more. By consolidating security capabilities traditionally found in multiple products, the Harmony SASE platform is a strategic solution that can help you build a secure network while addressing numerous security controls, whichever framework(s) you adhere to.
Get Started with Harmony SASE Today!
Access Control Management
• Manage and report on role-based access • MFA support
6.3-6.5, 6.8
Audit Log Management • Logging of URL requests, network, device
& admin activity, config & firewall changes • Log management and retention
8.1-8.2, 8.5, 8.7, 8.10
Email and Web Browser Protections
• DNS, URL filtering 9.2-9.3
Malware Defenses • Centrally-managed malware protection &
signature updates 10.1-10.2
Network Infrastructure Management
• Least privilege access
• User authorization and network activity logs
• Network traffic limited to secure protocols • Identity-based access rules & MFA support • 256-bit AES encryption • Allows only authenticated connections
12.1-12.7
Network Monitoring
and Defense
•
Granular firewall and network policy rules •
Identity-based access controls •
Device security posture enforcement • Network traffic flow visualization
13.4-13.6, 13.9, 13.10