CIS critical security controls
CloudTech24 work with businesses to strengthen your cyber defences with CIS Critical Security Controls (CIS 18).
CIS implementation and security controls
At CloudTech24, we help UK businesses implement and maintain the CIS Controls v8.1, the globally recognised cybersecurity framework from the Centre for Internet Security (CIS) that delivers maximum protection against real-world threats.
Our approach is aligned with the official CIS Controls Implementation Guide, ensuring every control is deployed in line with best-practice guidance and prioritised based on your organisation’s size, risk profile, and maturity level. This structured methodology enables us to focus on the safeguards that deliver the greatest risk reduction first, while building a scalable, long-term security posture.
Our end-to-end CIS implementation services cover all 18 controls, from initial gap analysis through to ongoing monitoring and management. We don’t just provide recommendations — we take full ownership of implementation, integrating technical controls, policies, and processes into your existing environment with minimal disruption.
Whether you’re working towards Cyber Essentials Plus, ISO 27001, or strengthening your cyber resilience against modern threats, our CIS-led approach provides a clear, measurable, and proven path to achieving and maintaining compliance.
We let the numbers do the talking
At CloudTech24, we’re proud of the results we deliver for our clients. With a 96% year-over-year client retention rate, we’ve built lasting relationships by consistently providing reliable and effective solutions.
Today, we support over 250 customers across more than 10 countries worldwide, showcasing our ability to scale and serve businesses globally. What sets us apart is our speed and efficiency. We resolve issues in less than 68 minutes on average, ensuring our clients get the support they need without delays. These achievements reflect our commitment to delivering exceptional service and value every single day.
96%
Retention of current clients YoY
250+
Customers in over 10 countries worldwide
<68
Minutes to issue resolution
What is the Center for Internet Security (CIS)?
The Center for Internet Security (CIS) is a non-profit organisation that develops globally recognised security benchmarks. Their CIS Controls are widely used by businesses, governments, and institutions to implement effective cyber security frameworks.
CIS Controls are regularly updated to respond to new and emerging cyber threats—making them one of the most practical and scalable security strategies available.
Why align with the CIS controls?
The CIS 18 controls (formerly known as the SANS Top 20) are a set of actionable, prioritised cybersecurity best practices designed to protect organisations from the most common and impactful threats.
The controls are split into three Implementation Groups (IG1, IG2, IG3), allowing businesses of all sizes to take a scalable approach to security.
Benefits of CIS alignment:
- Proven protection against modern threats
- Structured improvement of your security posture
- Compliance-ready documentation
- Guidance for both SMEs and large enterprises
What are the CIS 18 controls?
The CIS Controls v8.1 framework provides businesses with 18 proven security safeguards that deliver maximum impact against real-world cyber threats. CloudTech24 leverages these controls to strengthen your defences across every layer of your IT environment. The 18 CIS Controls include:
- Inventory and Control of Enterprise Assets: Full visibility of all hardware
- Inventory and Control of Software Assets: Tracking all applications and versions
- Data Protection: Securing sensitive information at rest and in transit
- Secure Configuration: Hardening systems against known attack vectors
- Account Management: Managing user identities and privileges
- Access Control Management: Least privilege access enforcement
- Continuous Vulnerability Management: Automated scanning and prioritisation
- Audit Log Management: Comprehensive logging for incident detection
- Email and Web Browser Protections: Defending phishing and drive-by attacks
- Malware Defences: Multi-layered endpoint protection
- Data Recovery Capabilities: Ensuring business continuity after attacks
- Network Infrastructure Management: Securing routers, switches, firewalls
- Network Monitoring and Defences: Real-time threat detection
- Security Awareness and Skills Training: Building the human firewall
- Service Provider Management: Securing your supply chain partners
- Application Software Security: Protecting custom and COTS applications
- Incident Response Management: Rapid detection and recovery
- Govern: Strategic cybersecurity governance framework
CloudTech24 operationalises these 18 controls through our managed security services, delivering measurable protection aligned with these CIS security controls provide a roadmap to build, mature, and maintain your cyber defences.
How CloudTech24 helps with CIS controls implementation
We offer comprehensive services to help your business align with the CIS security framework:
- Gap Analysis & CIS Mapping: Evaluate your current security posture and align it with the appropriate CIS Implementation Group.
- CIS Controls Consulting: Receive expert guidance on implementing each CIS 18 control, with tailored support for your industry.
- Managed Security Services: 24/7/365 monitoring, endpoint protection, vulnerability scanning, firewall management, and more.
- CIS Security Compliance Monitoring: Maintain continuous alignment through automated tools and human oversight.
Our clients benefit from enterprise-grade protection using trusted solutions from leading cyber security vendors—all fully managed by our expert security operations centre (SOC).
Book a discovery call
Book a time that works for you to talk to our sales team about how a team of global engineers from around the world deliver 24/7 cybersecurity and IT services.
Frequently asked questions about CIS security controls
Please see below for some common questions about CIS Security Controls. If you would prefer to speak to someone then give us a call and speak to one of our team in our global HQ to understand your requirements and learn how our security experts support other businesses in the United Kingdom (UK).
What are CIS controls?
CIS Controls (formerly Critical Security Controls) are a set of 18 actionable best practices designed to reduce your organisation’s exposure to cyber threats. They’re used to guide secure IT practices across all industries.
What is the purpose of CIS critical security controls?
The purpose of the CIS controls is to improve an organisation’s cyber resilience by addressing the most common attack vectors through prioritised, structured guidance.
How many CIS controls are there?
There are 18 controls in total, as outlined in CIS v8. These form a tiered cybersecurity framework for businesses of all sizes.
What is the difference between CIS and NIST?
While both CIS and NIST are respected cybersecurity frameworks, CIS is more prescriptive and prioritised, making it easier to implement for small and medium-sized organisations. NIST offers a broader, more strategic approach.
Is CIS compliance mandatory?
CIS cybersecurity compliance is not legally required but is strongly recommended as a baseline security framework. It can also support compliance with other standards such as ISO 27001, GDPR, and NIST.
Are the CIS Controls regularly updated?
Yes. The CIS Controls are maintained and updated by cybersecurity professionals worldwide to reflect the latest threat intelligence and best practices.
Trusted by over 250 companies globally
More than 250 companies trust us to manage their IT and cybersecurity. We’re known for our rapid response and friendly service. Not tech savvy? No problem; we explain what we’re doing in plain English, so you know what to expect and have clear timelines. You’ll always receive a warm welcome from our team.
What our clients say about us
Fantastic team always sort out our problems fast
Great service from these guys. Very responsive, helpful, knowledgable and technically competent – we get excellent IT support from them.
Received detailed information and feedback that was clearly explained in a timely manner.
Very helpful and resolved my issues quickly. Many thanks
Very helpful team, provided quick responses and services, highly recommend!
Great Team and services!
I work directly with CloudTech24 as a vendor of theirs, CloudTech24 are a very mature and forward thinking MSP. Their processes are carefully mapped out and diligently analysed – they carefully leverage AI and automation to assist with their day-to-day offerings with the customer as the forefront of their decision making.
Quick support by Ralph. Smooth service amidst difficult technicalities
I had full confidence when first dealing with the team at CloudTech24 as their communication from start to finish was exceptional and made me feel at ease. When IT is an essential part of business, it can be stressful when things go wrong but with CloudTech24 they have regularly exceeded my expectations.
Swift response and resolution to any issues. The Service Desk team are always proactive and helpful.
I had a fantastic experience when dealing with CloudTech24. Their team are quick, knowledgeable and friendly and they solved my issue very promptly.
We’ve partnered with CloudTech for many years now, and the team are always super friendly and are experts at what they do.
We’ve partnered with CloudTech24 for several years, and they always go above and beyond for their clients. They are a pleasure to work with, and we would 100% recommend them to anyone looking for IT support!
We’ve had the pleasure of partnering with CloudTech24 for several years, and it’s a relationship we genuinely value. They’re a fantastic team, always going the extra mile for their clients and bringing real care to everything they do. Great people, great attitude, and a joy to work alongside.
Very speedy response team
Extremely quick and efficient response
The team have been great! Very easy to work with and keep things as simple as possible for me. Thanks again 🙏🏼
Working with CloudTech24 has been a genuinely smooth and valuable experience from start to finish. The onboarding process was structured and efficient, with the team taking time to fully understand our setup, risks, and goals before implementing any solutions.
Day-to-day, their support has been consistently reliable. Issues are handled quickly, often before they become real problems, and there’s a clear proactive approach rather than just reactive fixes.
Their cybersecurity expertise has also added a strong layer of confidence, we know our systems, data, and users are properly protected.
What stands out most is the level of service. Communication is clear, response times are fast, and nothing feels like too much trouble. They operate more like an extension of our team than an external provider, which makes a big difference.
Overall, it’s taken a lot of stress away from managing IT internally and allowed us to focus on growing the business, knowing everything behind the scenes is in safe hands.
Quick response
Understood the pain point, fixed it, job done!
Long Term Customer of Cloudtech24 – since November 2019.
Always answer the questions, they are always happy to bounce ideas off.
Seem to be very knowledgeable and on top of their game.
Responsive and friendly team
CloudTech24 have been a huge support to Positively Adam, providing reliable IT and cybersecurity services here in London.
From day one, their approach has been proactive rather than reactive. Their 24/7 support gives real peace of mind, issues are handled quickly, communication is clear, and nothing feels left hanging. It’s reassuring to know our systems are constantly monitored and protected.
They’ve strengthened our Microsoft 365 setup, tightened our security, and made our overall IT infrastructure far more streamlined and resilient. Most importantly, they explain everything in straightforward terms, which makes decision-making easy and stress-free.
If you’re looking for an IT partner that genuinely adds value and helps your business run smoothly, I highly recommend CloudTech24.
We’ve been working with CloudTech24 for our IT support and cybersecurity in London, and the service has been outstanding.
Their 24/7 support genuinely makes a difference. Any issues are picked up quickly, resolved efficiently, and communicated clearly, no chasing, no confusion. You can tell they proactively monitor systems rather than just reacting when something breaks.
What really stands out is their professionalism and technical expertise. From Microsoft 365 support to strengthening our overall cybersecurity posture, everything feels structured, secure, and well-managed. They explain technical matters in plain English, which is invaluable for non-technical teams.
If you’re a London-based business looking for reliable, proactive IT support that actually feels like a partnership rather than a helpdesk, I wouldn’t hesitate to recommend CloudTech24.
CT24 have regularly provided outstanding support. The team are always responsive, polite, helpful and a pleasure to work with. A big thanks to all the team!
great job and helped me out.
Setting up a new business can be daunting but the team at CT24 assisted me with all the tech set up. Their response time in amazing, they were calm and patient with my million questions. I cannot recommend them more highly.
The latest blogs from CloudTech24
The steep rise in ‘ClickFix’ style phishing attacks
What is ClickFix? ClickFix is a social engineering technique that the Security Operations team at CloudTech24 are seeing cybercriminals use to trick users into infecting their own devices. Typically, we find that a user is redirected to a fake verification page that impersonates a trusted service such as Cloudflare, Google reCAPTCHA, or a website security…
Read more
What is a virtual CISO (vCISO)?
Cybersecurity issues don’t pop up one at a time. They’re often frequent, urgent, and complex. When issues build up and the level of complexity increases to the point where your team needs an extra hand, having a vCISO can lighten the load. A vCISO (Virtual Chief Information Security Officer) is a security leader who serves…
Read more
Which one is better – AWS, Azure, or Google Cloud?
Choosing the right cloud infrastructure is a decision you can’t take lightly. Today, businesses must decide whether to build their applications on AWS, Azure, or Google Cloud. While these platforms offer similar core features like storage and computing power, each vendor approaches infrastructure, security, and developer experience with a completely different philosophy. This blog breaks…
Read more
The role of ethical hacking in penetration testing
Hacking into a business is, 99% of the time, a malicious act aimed at damaging an organisation. But penetration testing is that 1%, where it’s actually an incredibly safe and skilful way to find how you can improve your business. In this guide, we’ll cover what penetration testing is, how it works, the process, and…
Read more
Why it pays to use a password generator
Your password is your first line of security for everything online. Any software, website, or app you use likely requires a login, so your password needs to be strong and unique. Weak credentials or other vulnerabilities can be exploited by hackers. You can utilise professional penetration testing services to safely evaluate your defences. If testing…
Read more
The best AI notetakers in 2026
AI notetakers are the way forward. As they grow in popularity, they continue to become more accurate and advanced, quickly becoming standard practice for both businesses and individuals. As with any newly discovered tool, there’s a need to understand what they are, how they work, and which one is best for you. Not just the…
Read more