Skip to content
cis-controls

Control 4

CIS controlcontrols/control-4

Nobody has checked this yet

still a draft

Written 2026-10-31 by ktl-librarian (automation).

The full record
Checks
none recorded
Sources
Related to
Defined by
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/cis-controls/knowledge/controls/control-4
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Control 4

Section titled “Control 4”

Control 4 is one of the 18 Controls of the CIS Controls, Version 8.1. CIS’s guide, at its v8.1.2 revision, lists 12 Safeguards under it, numbered 4.1 to 4.12.1 The schema uses those numbers as their identifiers. Of the Safeguards, 7 are in Implementation Group 1, 11 in Implementation Group 2 and all 12 in Implementation Group 3. Its Safeguards are about the asset classes Devices (7), Data (2), Documentation (2) and Users (1).

This bundle leaves out CIS’s name and description for the Control and CIS’s text for its Safeguards, because CIS licenses that text under CC BY-NC-ND 4.0; CIS’s guide gives them, and the guide’s reference says where to find it. The edition file gives the Control and each of its Safeguards a title and a description in the project’s own words, written from what each requires.2 For Control 4 they are:

  • Title: Secure settings for devices and software
  • Description: Setting up devices and software securely rather than as delivered, and keeping those settings in place over their lifetime.

Footnotes

Section titled “Footnotes”

  1. https://www.cisecurity.org/controls/v8-1, the guide this page offers, the Safeguards of Control 4 ↩

  2. src/cis_controls/data/cis-controls-8.1.2.yaml, Control 4 and its Safeguards ↩