How CIS Can Help You Enact Defense-in-Depth in the Cloud

This blog post presents a hypothetical ransomware attack lifecycle—from phishing-led credential harvesting through execution, persistence and defense evasion, discovery and lateral movement, to data exfiltration and impact—and maps each phase to specific CIS Safeguards and MS-/EI-ISAC services (e.g., DNS filtering, behavior-based anti-malware, host/network IDS/IPS, MFA, secure configurations, and tested, isolated backups) to demonstrate a defense-in-depth strategy that can disrupt and mitigate such attacks.