Coverage
How SBCMSP maps CIS v8
Continuous monitoring across every control family — 153 controls, scored on each scan.
Basic (IG1)
Inventory, config, accounts and access — the essentials.
Foundational (IG2)
Vulnerability mgmt, logging and email/web defenses.
Organizational (IG3)
Pen testing and incident response.
Asset control
Hardware and software inventory and control.
Implementation Groups
Track IG1 → IG2 → IG3 progress.
Evidence & reporting
Auto-collected evidence and a white-label, audit-ready PDF for every control.
Who it’s for
Any organization that wants a prioritized, practical security baseline.