> For the complete documentation index, see [llms.txt](https://resources.yamaindustrials.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://resources.yamaindustrials.com/sans.md).

# SANS

(SysAdmin, Audit, Network and Security)

## CIS Critical Security Controls: Guidelines

### Critical Controls for Effective Cyber Defense

To secure against cyber attacks, organizations must vigorously defend their networks and systems from a variety of internal and external threats. They must also be prepared to detect and thwart damaging follow-on attack activities inside a network that has already been compromised. Two guiding principles are: "Prevention is ideal but detection is a must" and "Offense informs defense."

### The Goal of the Critical Controls

The goal of the Critical Controls is to protect critical assets, infrastructure, and information by strengthening your organization's defensive posture through continuous, automated protection and monitoring of your sensitive information technology infrastructure to reduce compromises, minimize the need for recovery efforts, and lower associated costs.