Center for Internet Security
A nonprofit that publishes the CIS Critical Security Controls, a prioritized list of defensive actions, and the CIS Benchmarks, which are hardening guides for hundreds of technologies. Its resources give organizations a practical, consensus-based starting point for securing systems. Many compliance frameworks map directly to the CIS Controls.