
Framework: The Center for Internet Security (CIS) Top 18 Controls


technology
Hosted by Jason Edwards · technology · EN
The **CIS Critical Security Controls Audio Course** is a comprehensive, audio-first training series that guides listeners through all eighteen **CIS Controls**, transforming one of the world’s most respected cybersecurity frameworks into clear, actionable learning. Designed for professionals, students, and auditors alike, this series explains each control in practical, plain language—focusing on how to implement, assess, and sustain them in real environments. With eighty-three structured episodes, the course walks you step by step through the safeguards that define effective cybersecurity, helping you understand not only what to do but why each measure matters.The **CIS Controls**, maintained by the Center for Internet Security, represent a globally recognized set of prioritized actions proven to reduce the most common and dangerous cyber risks. Organized across eighteen control families—from inventory and configuration management to incident response and data recovery—the framework
Required Pod Score for this podcast. PitchCentric checks your profile against host openness, topical fit, and audience signals before you generate a pitch.
Contact path
Verified email
Booking probability
34%
Guest openness
Selective
Sign up to generate a grounded pitch for Framework: The Center for Internet Security (CIS) Top 18 Controls.
Signup to Generate a PitchThe **CIS Critical Security Controls Audio Course** is a comprehensive, audio-first training series that guides listeners through all eighteen **CIS Controls**, transforming one of the world’s most respected cybersecurity frameworks into clear, actionable learning.
Framework: The Center for Internet Security (CIS) Top 18 Controls is hosted by Jason Edwards. The show has published 83 episodes to date.
Recent episodes include "Welcome to the CIS 18 Control Framework" (18 October 2025, 2 minutes), "Episode 82, Safeguard 18.2, Internal and red team exercises" (18 October 2025, 13 minutes), and "Episode 81, Safeguard 18.1, External testing programs" (18 October 2025, 11 minutes).
Framework: The Center for Internet Security (CIS) Top 18 Controls publishes roughly daily, with episodes averaging 11 minutes across 83 episodes.
Booking probability for Framework: The Center for Internet Security (CIS) Top 18 Controls is 34%, and the host is rated Selective on guests. Framework: The Center for Internet Security (CIS) Top 18 Controls requires a Pod Score of 80 or higher. Framework: The Center for Internet Security (CIS) Top 18 Controls's contact route on record: verified email.
The strongest fits for Framework: The Center for Internet Security (CIS) Top 18 Controls are IT Services & Software Development and Business & Professional Training. Framework: The Center for Internet Security (CIS) Top 18 Controls has a technology audience.
Jason Edwards hosts Framework: The Center for Internet Security (CIS) Top 18 Controls, a technology podcast with 83 episodes published.
Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

Framework: The Center for Internet Security (CIS) Top 18 Controls

Safeguard 18.2 extends penetration testing to include internal assessments and red team exercises that emulate an attacker with initial access. Internal testing evaluates how far a threat could move laterally, escalate...

Safeguard 18.1 requires organizations to establish and maintain a formal penetration testing program that includes recurring external assessments. External tests simulate real-world attackers operating from outside the...

Control 18—Penetration Testing—closes the CIS framework by validating how well all other controls perform under real-world conditions. While vulnerability scanning identifies potential weaknesses, penetration testing...

The remaining safeguards in Control 17 reinforce the full lifecycle of incident response—spanning preparation, communication, testing, and continuous improvement. These include assigning key response roles, defining...

Safeguard 17.2 emphasizes the importance of testing the incident response plan through structured tabletop exercises. These simulations bring together key personnel—from technical teams to executives—to rehearse...

Safeguard 17.1 requires organizations to establish and maintain a comprehensive incident response process that defines scope, roles, responsibilities, and communication procedures. This process must include not only the...

Control 17—Incident Response Management—defines how an organization prepares for, detects, responds to, and learns from security incidents. Even the most robust defenses can be breached, and when that happens, success...

The remaining safeguards under this control expand beyond coding and testing to address the full ecosystem in which applications live. They include maintaining an inventory of third-party components (a software bill of...

This safeguard advances assurance by requiring a structured process to accept and address reported vulnerabilities and by embedding testing that sees both code and behavior. Static analysis inspects source or bytecode...

This safeguard directs organizations to formalize a secure application development process and set explicit standards for how code is designed, written, reviewed, and released. Secure coding practices begin with...

A secure software lifecycle integrates security activities into every stage of building and operating applications—planning, design, development, testing, deployment, and maintenance—so that weaknesses are prevented...

The remaining safeguards in Control 15 round out a complete third-party risk program by adding structured assessment, continuous monitoring, and secure decommissioning. After building the inventory and embedding...

Safeguard 15.2 ensures that contracts with service providers explicitly define security expectations and obligations, creating enforceable accountability. Every vendor relationship introduces risk, and legal agreements...

Safeguard 15.1 requires organizations to establish and maintain a complete inventory of all service providers that store, process, or access enterprise data. This inventory must include vendor classification, assigned...

Control 15—Service Provider Management—addresses the growing reliance on third-party vendors and the risks that accompany it. In today’s interconnected ecosystems, external partners often handle sensitive data or manage...

The remaining safeguards under Control 14 extend awareness beyond general staff by emphasizing continuous reinforcement, contextual learning, and cultural integration. They include training employees to recognize and...

Safeguard 14.3 focuses on providing targeted, role-based training to employees whose responsibilities involve elevated privileges or specialized technical duties—such as system administrators, developers, and IT support...

Safeguard 14.2 emphasizes the use of phishing simulations to test, measure, and improve employee awareness of social engineering attacks. Phishing remains the most prevalent method for initial compromise, exploiting...

Safeguard 14.1 requires organizations to establish and maintain a formal security awareness program that educates the workforce on secure behaviors and threat recognition. The program should define clear objectives...
PitchCentric classifies Framework: The Center for Internet Security (CIS) Top 18 Controls under these industries. Guests from them are the closest fit, and each links to the best podcasts in that industry.
Shows with the most semantically similar episode content. Pitch one, pitch all; producers cluster.

Framework: NIST 800-53 Audio Course

Framework: The NIST Cybersecurity Framework (CSF)

Certified: The GIAC GISF Audio Course

Certified: The ISC(2) CC Audio Course

Certified: The GIAC GCCC Audio Course

Framework: HITRUST
Guides and articles for guests pitching shows like this one.
Is this podcast yours and you'd like to remove or correct details? Request removal or email privacy@pitchcentric.com.
Questions about the free trial? See the pricing FAQ