When the Center for Internet Security (CIS) Controls were be…
When the Center for Internet Security (CIS) Controls were being revised into the current version (i.e., version 8) there were a series of design principles used to help guide the revision process. One of those principles states that the CIS Controls should help defenders identify the most critical things to do to stop the most important attacks and to avoid the temptation of trying to solve every security problem (that is, avoid ‘good things to do’ or ‘things you could do’). Which CIS design principle are those statements related to?