Lion Cipher Lab

Do a CIS Controls IG1 gap assessment

• GRC / Compliance
• Beginner
• ~45 min
• Free · no account required

Why it matters

Frameworks tell you what outcomes to aim for; the CIS Critical Security Controls hand you the concrete, prioritized list of things to actually do — and Implementation Group 1 marks the subset that is essential cyber hygiene for every organization, including a home lab or a four-person business. Running a gap assessment against IG1 is one of the highest-value hours a beginner can spend, because IG1 is deliberately the achievable floor: a small set of basic actions that, done consistently, stops the large majority of common, opportunistic attacks. The skill you practice — take a real…

What you'll learn

• reading the CIS Critical Security Controls
• Implementation Groups (IG1)
• Safeguards
• gap assessment
• evidence-based control rating
• prioritizing security fixes
• GRC fundamentals

Steps in this lab

1. The five words this lab runs on
2. Why IG1 is the target — the achievable floor
3. Pick a real environment and open the IG1 template
4. Set the rating rule: present, partial, absent — with evidence
5. Rate the inventories and data — you cannot protect what you have not listed
6. Rate configuration, accounts, and access — the identity core
7. Rate patching, logs, email, and malware — then recovery and people
8. Turn the gaps into a ranked one-page assessment — and keep the mindset

Open the full interactive lab →