--- title: CIS Controls | HOZHO Cybersecurity description: Explore cis controls with HOZHO Cybersecurity. Practical guidance and support for your organization's needs. --- [Skip to main content](https://www.gohozho.com/cis-controls#main) NIST CSF · CIS Controls · PCI DSS [![HOZHO Cybersecurity supports tribal governments, local governments, nonprofit organizations, small businesses, and other organizations that may not have a full-time cybersecurity executive. Its services are designed to make cybersecurity compliance more practical, understandable, and affordable.](https://www.gohozho.com/hs-fs/hubfs/HOZHO%20Logo/Type/Full%20Color/hozho_cybersecurity-logotype-full-color-rgb-200px@60px.png?width=200&height=68&name=hozho_cybersecurity-logotype-full-color-rgb-200px@60px.png)](https://www.gohozho.com?hsLang=en) [Services](https://www.gohozho.com/services-overview?hsLang=en) [Memberships](https://www.gohozho.com/memberships?hsLang=en) [Training](https://www.gohozho.com/training-simulated-phishing?hsLang=en) [About](https://www.gohozho.com/about-hozho?hsLang=en) [Get a Free Risk Checkup](https://scheduler.zoom.us/gohozho/consult30) COMPLIANCE & FRAMEWORKS # Start with practical cybersecurity priorities. Use CIS Controls as a foundation for a cybersecurity program that fits limited resources. HOZHO helps translate relevant safeguards into actions, owners, and evidence. [Build My CIS Starting Point](https://scheduler.zoom.us/gohozho/consult30)[Get My Free Risk Checkup](https://inbound.gohozho.com/free-10-minute-cybersecurity-checkup-hozho) For small businesses, nonprofits, and tribal and local governments. ## A manageable starting point Focus effort on safeguards appropriate to your organization. - 1Review essential cyber hygiene - 2Prioritize the gaps that matter - 3Expand as needs and resources change A foundation for steady improvement. CIS CONTROLS ## A practical foundation for your security program. Explore the areas we can address together. Your engagement is shaped around your priorities, current capabilities, and available resources. PRIORITIES ### Start with essential cyber hygiene CIS Controls v8.1 uses Implementation Groups to help prioritize safeguards. IG1 provides an essential cyber hygiene starting point. - Discuss your operating environment - Review foundational safeguards - Identify gaps worth addressing first IMPLEMENTATION ### Turn safeguards into work Connect relevant safeguards with the people, processes, and tools needed to put them into practice. - Asset and account management - Access, protection, and recovery - Awareness and incident preparation ACCOUNTABILITY ### Track progress with evidence Maintain a useful view of actions, responsibility, and supporting records. - Named owners and target actions - Evidence of implemented practices - Review of exceptions and remaining gaps ALIGNMENT ### Connect to other requirements Use relevant mappings to inform broader readiness work without assuming identical coverage. - CIS as a practical baseline - Review overlaps with target frameworks - Validate framework-specific gaps ### Practical first, then broader alignment HOZHO typically starts with CIS because our clients need useful priorities within real budgets. We tailor the work rather than treating every safeguard as an identical project. ## How we work together Start with a shared understanding, agree the scope, and turn the work into practical action. 1 ### Review the baseline Agree the environment and review relevant CIS safeguards against current practices. 2 ### Prioritize improvements Sequence actions around your risks, available resources, and responsibilities. 3 ### Build and review Implement agreed changes and revisit progress as your organization evolves. ## Questions you may have Is CIS only for large organizations? No. Implementation Groups help organizations prioritize safeguards according to their context and resources. Does starting with IG1 address every obligation? No. Your risks, contracts, and sector requirements may call for additional safeguards and evidence. Can CIS support NIST or ISO readiness? Relevant mappings can help organize overlapping work. They do not replace a target framework assessment or certify compliance. ### Explore related support [Official CIS Controls v8.1](https://www.cisecurity.org/controls/v8-1)[Risk Assessments](https://inbound.gohozho.com/risk-assessments)[Compliance Readiness](https://inbound.gohozho.com/compliance-readiness) ## Let’s identify your next priority. Tell us about your organization, what is changing, and where you need support. We will help you define a practical starting point. [Build My CIS Starting Point](https://scheduler.zoom.us/gohozho/consult30)[Get My Free Risk Checkup](https://inbound.gohozho.com/free-10-minute-cybersecurity-checkup-hozho) Services, deliverables, technology, vCISO involvement, and response commitments are defined in your proposal and agreement. Additional projects and specialized services may require separate scope. ###### Services - [Services Overview](http://inbound.gohozho.com/services-overview) - [Email, Cloud, & Identity Protection](https://www.gohozho.com/email-cloud-identity-protection?hsLang=en) - [Memberships](https://www.gohozho.com/memberships?hsLang=en) - [Policies & Governance](https://www.gohozho.com/policies-governance?hsLang=en) - [Risk Assessments](https://www.gohozho.com/risk-assessments?hsLang=en) - [Training & Simulated Phishing](https://www.gohozho.com/training-simulated-phishing?hsLang=en) ###### Compliance & Frameworks - [Compliance Readiness](https://www.gohozho.com/compliance-readiness?hsLang=en) - [CIS Controls](https://www.gohozho.com/cis-controls) - [NIST](https://www.gohozho.com/nist?hsLang=en) - [PCI-DSS](https://www.gohozho.com/pci-dss?hsLang=en) - [ISO 27001](https://www.gohozho.com/iso-27001?hsLang=en) - [Cyber Insurance Readiness](https://www.gohozho.com/cyber-insurance-readiness?hsLang=en) ###### Company - [About HOZHO](https://www.gohozho.com/about-hozho?hsLang=en) - [Industries](https://www.gohozho.com/industries?hsLang=en) - [Contact](https://www.gohozho.com/contact-1?hsLang=en) - [Legal & Privacy](https://www.gohozho.com/legal-privacy?hsLang=en) - [Support](https://www.gohozho.com/support?hsLang=en) HOZHO Cybersecurity brings leadership, people, policies, and protection together under one coordinated cybersecurity strategy. Services vary by membership. © 2026 HOZHO Cybersecurity. All rights reserved. Peace of Mind by Design