CIS Control 13: Data Protection

The processes and tools used to prevent data exfiltration, mitigate the effects of exfiltrated data, and ensure the privacy and integrity of sensitive information.

• Control 13.1: Maintain an Inventory of Sensitive Information
• Control 13.2: Remove Sensitive Data or Systems Not Regularly Accessed by Organization
• Control 13.6: Encrypt Mobile Device Data