Harmony SASE Complete Offering One-Pager End User Version_b
Addressing CIS Controls with Harmony SASE
The Center for Internet Security (CIS) Critical Security Controls are designed to provide pragmatic, actionable recommendations for improving an organization’s cybersecurity preparedness. Since being first published in 2008, the CIS Controls have been regularly updated, with version 8 released in 2021. Each of the 18 Controls is broken down into several Safeguards, which help address specific aspects of an organization’s security program.
How Organizations Use Harmony SASE to Address CIS Controls
By implementing the CIS Controls, organizations are better able to defend against today’s threats and can mitigate the impact of a cyberattack. Harmony SASE provides a robust networking and security platform that enables stronger adherence to the CIS Controls. Specifically, the Harmony SASE platform satisfies more than 35 CIS Controls and Safeguards, in full or partially, as summarized in the table below.
| CIS Control | Summary of Harmony SASE Capabilities | CIS Safeguards supported |
|---|---|---|
| Inventory and Control of Enterprise Assets | Monitoring & reporting on managed devices. Device posture check | 1.1-1.2 |
| Inventory and Control of Software Assets | Determine access rules for on-prem & cloud applications. Identify the use of unauthorized apps. Limit app access to only authorized users | 2.1, 2.3, 2.5 |
| Data Protection | Enable least privilege. Enforce disk encryption. Set up encrypted tunnels | 3.3, 3.6, 3.10 |
| Secure Configuration of Enterprise Assets and Software | Cloud-based firewall. Private DNS configuration. On-device agent | 4.4, 4.5, 4.9 |
| Account Management | User/admin inventory | 5.1 |
| Access Control Management | Manage and report on role-based access. MFA support | 6.3-6.5, 6.8 |
| Audit Log Management | Logging of URL requests, network, device & admin activity, config & firewall changes. Log management and retention | 8.1-8.2, 8.5, 8.7, 8.10 |
| Email and Web Browser Protections | DNS, URL filtering | 9.2-9.3 |
| Malware Defenses | Centrally-managed malware protection & signature updates | 10.1-10.2 |
| Network Infrastructure Management | Least privilege access. User authorization and network activity logs. Network traffic limited to secure protocols. Identity-based access rules & MFA support. 256-bit AES encryption. Allows only authenticated connections | 12.1-12.7 |
| Network Monitoring and Defense | Granular firewall and network policy rules. Identity-based access controls. Device security posture enforcement. Network traffic flow visualization | 13.4-13.6, 13.9, 13.10 |
Beyond CIS Controls
Many security and compliance frameworks overlap with common principles of the CIS Controls, such as access controls, malware defense, logging, and more. By consolidating security capabilities traditionally found in multiple products, the Harmony SASE platform is a strategic solution that can help you build a secure network while addressing numerous security controls, whichever framework(s) you adhere to.