The edition file

The edition file

src/cis_controls/data/cis-controls-8.1.2.yaml holds CIS Controls v8.1 at its v8.1.2 revision of March 2025 as one CisControls document. It lists the 18 Controls and their 153 Safeguards, and gives each Safeguard its asset class, security function and Implementation Groups, as CIS’s guide sets them out.¹ Implementation Group 1 holds 56 Safeguards, Implementation Group 2 holds 130 and Implementation Group 3 holds all 153.²

The file gives each Control and Safeguard a title and a one- or two-sentence description in the project’s own words, written from what each requires.³ NOTICE says why: CIS licenses the CIS Controls under CC BY-NC-ND 4.0, so the repository holds no title, description, overview, explanation or procedure from the guide, copied or paraphrased. Each title is the project’s own name for the element, never CIS’s.⁴

tests/test_edition.py holds the file to the schema, to the guide’s counts and to the rules no validator checks, as Test data and tests lists. The 18 Control concepts give each Control’s title and description from it.

Footnotes

1. src/cis_controls/data/cis-controls-8.1.2.yaml, the header comment and the document ↩

2. tests/test_edition.py, SAFEGUARDS_PER_GROUP and the four tests ↩

3. README.md, the What it models section ↩

4. NOTICE, The CIS Critical Security Controls ↩