Title: Identify the Center for Internet Security’s (CIS) top 20 critical security controls.
Course: Cybersecurity in Food and Agriculture, Advanced (18204-II) > Section: Identifying Threats in Precision Agriculture (PA)

Identification includes

1. Inventory and control of hardware assets
2. Inventory and control of software assets
3. Continuous vulnerability management
4. Controlled use of administrative privileges
5. Secure configuration for hardware and software on mobile devices, laptops, workstations, and servers
6. Maintenance, monitoring, and analysis of audit logs
7. Email and web browser protections
8. Malware defenses
9. Limitation and control of network ports, protocols, and services
10. Data recovery capabilities
11. Secure configuration for network devices, such as firewalls, routers, and switches
12. Boundary defense
13. Data protection
14. Controlled access based on the need to know
15. Wireless access control
16. Account monitoring and control
17. Implement a security awareness and training program
18. Application software security
19. Incident response and management
20. Penetration tests and red team exercises

Process/Skill Questions:

- What benefit do these controls offer to cybersecurity as it relates to PA?
- Why is it important to identify hardware assets in the network?
- Why is it important to limit the use of administrative logins to a system?
- Who is responsible for training a small agribusiness owner to understand, characterize, interpret, and apply the CIS critical security controls?