SANS Institute Updates Courseware to Teach New CIS Controls v8

BETHESDA, Md. – SANS Institute, the largest provider of cybersecurity training and certification in the world, is excited to announce major course updates to two Cybersecurity Leadership courses focused on the most up-to-date critical security controls. In close partnership with the Center for Internet Security (CIS), SANS has revised and updated our curriculum to implement, measure and understand your organization's risk using the Critical Controls v8. As the CIS Controls version 8 are launching in May 2021 at the global RSA Conference, both SEC440: CIS Critical Controls: A Practical Introduction and SEC566: Implementing and Auditing CIS Critical Controls have been updated to reflect the revisions.

The updates to the CIS Controls focus on:

  • Including modern technologies like cloud and mobile
  • Defining Implementation Groups (IG) so that organizations can implement a prioritized set of Safeguards, or Sub-Controls, based on risk exposure and resources
  • Being consistent, simplified, and measurable by ensuring one requirement per Safeguard
  • Including a task-based focus regardless of who's executing the Control

SEC440: CIS Critical Controls: A Practical Introduction debuts May 13, 2021 at the Global RSA Conference
SEC566: Implementing and Auditing CIS Critical Controls debuts May 24, 2021

Learn more and stay updated at

About SANS Institute

The SANS Institute was established in 1989 as a cooperative research and education organization. Today, SANS is the most trusted and, by far, the largest provider of cybersecurity training and certification to professionals in government and commercial institutions world-wide. Renowned SANS instructors teach more than 60 courses at in-person and virtual cybersecurity training events and on demand. GIAC, an affiliate of the SANS Institute, validates practitioner skills through more than 35 hands-on, technical certifications in cybersecurity. The SANS Technology Institute, a regionally accredited independent subsidiary, offers a master's degree, graduate certificates, and an undergraduate certificate in cybersecurity. SANS Security Awareness, a division of SANS, provides organizations with a complete and comprehensive security awareness solution, enabling them to easily and effectively manage their "human" cybersecurity risk. SANS also delivers a wide variety of free resources to the InfoSec community, including consensus projects, research reports, webcasts, podcasts, and newsletters; it also operates the internet's early warning system—the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to support and educate the global information security community. (