Tandem is excited to announce a new partnership with the Center for Internet Security (CIS), bringing the CIS Controls framework directly into the Tandem Cybersecurity Assessment platform.

This partnership gives Tandem customers access to one of the most widely recognized and trusted cybersecurity frameworks in the industry, now available as a built-in option within our assessment software.

A Practical, Prescriptive Framework Built into Tandem

The CIS Controls are known for their clear, prioritized, and actionable approach to cybersecurity. With this new integration, organizations can now use the CIS Controls within Tandem to assess their current cybersecurity posture and drive meaningful improvements over time.

This capability is especially valuable for organizations transitioning away from the FFIEC Cybersecurity Assessment Tool (CAT) or responding to evolving regulatory and examiner expectations. It also supports teams that are seeking a more prescriptive, operational approach to cybersecurity, as well as organizations looking to improve structure, documentation, and accountability within their security program.

What Customers Can Do with Tandem and CIS

By using the CIS Controls framework in Tandem, customers can:

  • Complete a CIS Controls self-assessment directly within the software
  • Generate customizable, exportable reports for management, boards, and auditors
  • Map CIS Controls to their existing cybersecurity policies and controls
  • Assign tasks, set due dates, and collaborate across teams
  • Track progress and changes over time with audit-friendly documentation

Rather than working from static spreadsheets or disconnected tools, Tandem provides a living, framework-driven experience that supports continuous improvement and real-world execution.

CIS Controls Integrated into Tandem

This partnership reflects Tandem's commitment to making cybersecurity more approachable, structured, and effective. By combining Tandem's purpose-built assessment platform with the CIS Controls framework, organizations gain more than just another checklist. They gain a practical system for managing cybersecurity risk.

Watch our video demo to learn more about Tandem Cybersecurity Assessment.