Citation[]
Center for Strategic and International Studies, 20 Critical Security Controls for Effective Cyber Defense: Consensus Audit Guidelines (Ver. 4) (Nov. 2012) (full-text).
Overview[]
The Top 20 security controls were agreed upon by a consortium. Members of the consortium include the NSA, US-CERT, DOD JTF-GNO, the Department of Energy Nuclear Laboratories, Department of State, DOD Cyber Crime Center plus commercial forensics experts in the banking and critical infrastructure communities.