← CIS Controls v8 in plain English

18.1

Control 18 / Penetration Testing

Establish and Maintain a Penetration Testing Program

Think of it likeRegularly hiring a security expert to try breaking into your house to find weak spots.

In plain English

The family sets up a routine for testing the security of their systems by simulating attacks, just as they would regularly hire a security expert to test their home’s defenses.