This partnership is an important step in making foundational cybersecurity more attainable for both small and medium-sized organizations. To this end, CIS has developed a new prioritization scheme called the CIS Controls Assessment Specification for CIS Controls.