The Center for Internet Security's Critical Security Controls is a prioritized list of best practices for computer security. 'It gives organizations a strategy for defense. 'We'll discuss what we know about some recent data breaches and how a lack of effective controls in part lead to the breach.