Critical Security Controls

As California privacy laws take it up a notch, and GDPR is enforced more and more, I have been reviewing our controls selection and strategy toward policies. California is the only government agency I can find which has expressly stated a security framework for compliance and "safe harbor" purposes, and that is the Critical Security Controls.

Has anyone in the sub implemented CSC as their framework? How did you find it? Is it well-supported by vendors and clients? Does it …

controls critical cybersecurity security security controls