Center for Internet Security, Inc.

The Center for Internet Security, Inc. is an independent nonprofit organization founded in 2000. Its stated purpose is to safeguard public and private organizations against cyber and cyber-enabled threats, drawing on a global community of IT professionals to develop cybersecurity standards, products and services. The organisation works across both the public and private sectors, with particular involvement in United States state, local, tribal and territorial government.

Its best-known outputs are the CIS Controls and the CIS Benchmarks, globally recognized best practices for securing IT systems and data that are continuously revised through a community-driven, consensus-based process. Alongside these standards, the Center provides cloud-oriented products and services: CIS Hardened Images, which offer on-demand and scalable secure computing environments in the cloud; CIS Managed Detection and Response; Albert Network Monitoring; and the Malicious Code Analysis Platform (MCAP) for analysing malicious code.

The Center also operates the Multi-State Information Sharing and Analysis Center (MS-ISAC), a trusted resource for cyber threat prevention, protection, response and recovery for U.S. State, Local, Tribal and Territorial government entities. Its technical work spans cybersecurity, IT systems security best practices, cloud security, threat detection and monitoring, malicious code analysis, managed detection and response, and cyber threat information sharing.

Working practices reflect the organisation's nonprofit, community-driven model: standards are developed collaboratively with IT professionals worldwide, and the Center describes its mission as making the connected world a safer place. Its presence is global, with its primary operational base in the United States.