FRAMEWORK
CIS18 software for implementation and evidence
CIS18 is 18 controls and 153 safeguards. In .legal they become controls with an owner, tasks with a deadline and a progress figure you can show your board. You filter by implementation group, so you only work on what applies to you.
If you first want to know what the controls cover, we have the walkthrough in our CIS18 controls entry.
CIS18 FRAMEWORK
Choose your implementation group and work only on what applies
Not all 153 safeguards apply to everyone. The implementation group is a filter in the platform rather than a theoretical exercise: choose IG1, IG2 or IG3 and the control list adjusts. You can move up as your maturity grows.
What the three groups cover is explained in our dictionary entry on CIS implementation groups.
-
IG1 The baseline. For organisations with limited IT resources.
-
IG2 Extended. For organisations with dedicated IT staff.
-
IG3 Full coverage. All 153 safeguards.
CIS18 FRAMEWORK
Reuse the work across frameworks
CIS18 overlaps with what you already do under ISO 27001, NIS2 and GDPR. In .legal the frameworks sit in the same platform, so a control you have documented once does not need documenting again from scratch.
CIS18 is linked to the cyber security and information security compliance areas, so the work counts where it belongs.
TASKS
From 153 safeguards to tasks with an owner
A control without an owner goes nowhere. In .legal every control has a named coordinator, and the tasks that need doing sit underneath it. The list shows that control 8.7 has three of four tasks done, and that 5.4 is overdue.
Status follows the tasks rather than a manual judgement. As tasks close, the control moves and framework progress updates itself.
Our dictionary covers the individual controls too, such as asset inventory (Control 1), software asset management (2), data protection (3), secure configuration (4), vulnerability management (7) and email security (9).
-
A named owner on every control
-
Tasks with deadlines under the control, not just a status
-
Progress and completed task counts calculated automatically
-
Filter by category, status, tags, owner and implementation group
EVIDENCE
Evidence that is ready when the auditor asks
The heavy part of an audit is rarely the control itself. It is working out who did what and when. Each task leaves its evidence on the control it belongs to, rather than in an email thread.
If you run several companies, the same framework can run per company, so you see progress both together and separately.
-
Evidence sits on the control it belongs to
-
A note and evaluation per control
-
The same framework across group companies
-
Board reporting based on actual progress
-
Lægeforeningen Michael Berner (Lawyer).legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
-
Min By Media Tinna Schultz (HR manager)It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
-
Bech-Bruun Mikkel Friis Rossa (Partner).legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
-
DMJX Kaspar Rochholz (GDPR coordinator).legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
-
Axel Kaufmann ApS Julie Lundkvist Andreasen (Lawyer and Head of Customer Service).legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
-
Molecule Consultancy Nanna Rodian Christensen (HR & Operational Manager)Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
-
Fenerum Rasmus Boutrup (Financial Controller)With .legal, we've gained a simpler and more manageable solution that better suits our needs
-
Novicell Julie Oxenvad (Legal Consultant)We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
.jpeg?width=131&height=26&name=right_people_logo%20(1).jpeg){kind=small}
.jpg?width=58&height=26&name=Praktiserende%20L%C3%A6gers%20Organisation%20(1).jpg){kind=small}
.jpg?width=108&height=26&name=finans%20danmark%20(1).jpg){kind=small}
.jpg?width=89&height=26&name=klasselotteri%20(1).jpg){kind=small}
-1.png?width=34&height=26&name=bws_shipping_rgb%20-%20Kopi%20(2)-1.png){kind=small}
.jpeg?width=135&height=26&name=AH%20industries%20(1).jpeg){kind=small}
.jpg?width=225&height=26&name=KAUFMANN%20(1).jpg){kind=small}
