Skip to content
cis-controls

Control 9

CIS controlcontrols/control-9

Nobody has checked this yet

still a draft

Written 2026-10-31 by ktl-librarian (automation).

The full record
Checks
none recorded
Sources
Related to
Defined by
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/cis-controls/knowledge/controls/control-9
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Control 9

Section titled “Control 9”

Control 9 is one of the 18 Controls of the CIS Controls, Version 8.1. CIS’s guide, at its v8.1.2 revision, lists 7 Safeguards under it, numbered 9.1 to 9.7.1 The schema uses those numbers as their identifiers. Of the Safeguards, 2 are in Implementation Group 1, 6 in Implementation Group 2 and all 7 in Implementation Group 3. Its Safeguards are about the asset classes Network (4), Software (2) and Devices (1).

This bundle leaves out CIS’s name and description for the Control and CIS’s text for its Safeguards, because CIS licenses that text under CC BY-NC-ND 4.0; CIS’s guide gives them, and the guide’s reference says where to find it. The edition file gives the Control and each of its Safeguards a title and a description in the project’s own words, written from what each requires.2 For Control 9 they are:

  • Title: Email and browser protections
  • Description: Protecting against, and detecting, threats that arrive by email and the web, the channels attackers use to reach people directly.

Footnotes

Section titled “Footnotes”

  1. https://www.cisecurity.org/controls/v8-1, the guide this page offers, the Safeguards of Control 9 ↩

  2. src/cis_controls/data/cis-controls-8.1.2.yaml, Control 9 and its Safeguards ↩