Cybersecurity teams often struggle with a familiar problem: they know their defenses need work, but the path from assessment to action can feel overwhelming. The Center for Internet Security, Inc. (CIS®) has rolled out a slate of new features for its CIS SecureSuite Platform® designed to bridge that gap, giving organizations a clearer view of their security posture, the ability to rank priorities, and the tools to act on them.
The update introduces Cybersecurity Journey, a feature that takes completed CIS Critical Security Controls® (Controls®) assessments and turns them into an interactive roadmap for improvement. Alongside that, the release brings a new integrations framework, direct access to CIS Benchmarks® from CIS WorkBench, upgraded reporting options, and simplified access to policy templates.
“Organizations often know they need to improve cybersecurity, but determining where to start can be difficult,” said Phyllis Lee, CIS Vice President of Security Best Practices Content Development. “These new SecureSuite capabilities help organizations understand their current posture, focus on the most important improvements, and access trusted CIS resources from a single platform.”
With Cybersecurity Journey, assessment results are automatically converted into a step-by-step improvement plan. The feature delivers posture scores aligned to the six functions of the NIST Cybersecurity Framework (CSF) — Govern, Identify, Protect, Detect, Respond, and Recover — along with prioritized actions designed to close gaps and visual reports tailored for both technical teams and executive leadership. A key benefit: it relies on existing assessment data, so no additional data entry is required.
The release also marks the debut of a new integrations framework, launching with support for Action1, an endpoint management and vulnerability remediation platform. Through this integration, users can now see managed devices, known vulnerabilities, missing software updates, and remediation progress directly within SecureSuite, streamlining the workflow for IT and security teams.
Another notable addition: SecureSuite users can now pull the latest CIS Benchmarks straight from CIS WorkBench, with content available in multiple formats including PDF, Excel, SCAP, and ZIP, ensuring that security guidance is both current and easy to apply.
Other enhancements in this release include one-click CSV exports for assessment results, faster assessment and reporting views, improved visibility into assessment imports, and centralized access to editable cybersecurity policy templates. Together, these updates aim to create a more connected experience for assessing security posture, managing improvement efforts, and putting CIS best practices into action.
The new CIS SecureSuite capabilities are available now to current members. For more details on CIS SecureSuite Membership, visit CISecurity.org.
###
About CIS:
The Center for Internet Security, Inc. (CIS®) makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation. We are a community-driven nonprofit, responsible for the CIS Critical Security Controls® and CIS Benchmarks®, globally recognized best practices for securing IT systems and data. We lead a global community of IT professionals to continuously evolve these standards and provide products and services to proactively safeguard against emerging threats. Our CIS Hardened Images® provide secure, on-demand, scalable computing environments in the cloud. CIS is home to the Multi-State Information Sharing and Analysis Center® (MS-ISAC®), the trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial government entities, and the Elections Infrastructure Information Sharing and Analysis Center® (EI-ISAC®), which supports the rapidly changing cybersecurity needs of U.S. election offices. To learn more, visit or follow us on X: @CISecurity.
Kelly Wyland
Center for Internet Security
+1 518-256-6978
Visit us on social media:
LinkedIn
Instagram
Facebook
YouTube
X
Why it matters: The new toolkit gives organizations a practical way to turn high-level security assessments into concrete, prioritized action plans, reducing guesswork for teams that are often stretched thin. By tying the roadmap to the NIST CSF framework and integrating with tools like Action1, CIS is helping bridge the gap between knowing what’s wrong and fixing it — a critical step in an era of escalating cyber threats.
