---
type: CisControl
id: https://w3id.org/lmodel/cis-controls/knowledge/controls/control-15
title: Control 15
description: "Control 15 of the CIS Controls, Version 8.1, which the edition file titles Managing service providers in the project's own words: it holds 7 Safeguards, 15.1 to 15.7, of which 1 is in Implementation Group 1, 4 in Implementation Group 2 and all 7 in Implementation Group 3."
cis_control_id: "15"
resource: https://www.cisecurity.org/controls/v8-1
definedBy:
  - https://w3id.org/lmodel/cis-controls/knowledge/references/cis-controls-guide
relatedTo:
  - https://w3id.org/lmodel/cis-controls/knowledge/glossary/control
sources:
  - id: cis-v8-1
    resource: https://www.cisecurity.org/controls/v8-1
    title: the guide this page offers, v8.1.2 of March 2025, read on 2026-10-30
  - id: edition
    resource: src/cis_controls/data/cis-controls-8.1.2.yaml
    title: Control 15 and its Safeguards
generated:
  by: process:ktl-librarian
  at: "2026-10-31T12:14:49Z"
status: draft
---

# Control 15

Control 15 is one of the 18 Controls of the CIS Controls, Version 8.1. CIS's guide, at its v8.1.2 revision, lists 7 Safeguards under it, numbered 15.1 to 15.7.[^cis-v8-1] The schema uses those numbers as their identifiers. Of the Safeguards, 1 is in Implementation Group 1, 4 in Implementation Group 2 and all 7 in Implementation Group 3. Its Safeguards are about the asset classes Users (3), Data (2) and Documentation (2).

This bundle leaves out CIS's name and description for the Control and CIS's text for its Safeguards, because CIS licenses that text under CC BY-NC-ND 4.0; CIS's guide gives them, and [the guide's reference](../references/cis-controls-guide.md) says where to find it. The edition file gives the Control and each of its Safeguards a title and a description in the project's own words, written from what each requires.[^edition] For Control 15 they are:

- **Title:** Managing service providers
- **Description:** A process for assessing the providers that hold the enterprise's sensitive data or run its important platforms and processes, so that they protect them properly.

[^cis-v8-1]: <https://www.cisecurity.org/controls/v8-1>, the guide this page offers, the Safeguards of Control 15
[^edition]: src/cis_controls/data/cis-controls-8.1.2.yaml, Control 15 and its Safeguards