← CIS Controls v8 in plain English

18.4 IG3

Control 18 / Penetration Testing

Validate Security Measures

Think of it likeDouble-checking that all the locks and alarms work after making improvements to your home’s security.

In plain English

The family verifies that all security measures are effective after changes are made, just as they would ensure all locks and alarms are functioning properly after an upgrade.

Related CSF subcategories (unofficial mapping)

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties.