Implementing the Center for Internet Security® Risk Assessment Method (CIS-RAM)

This program is designed for Election Officials who, with their Technology Support Team are ready to build a more secured working environment.

Using the Center for Internet Security® Risk Assessment Method (CIS-RAM), we work with organizations to create “reasonable” safeguards and risk management practices for regulatory, contractual, and security management purposes. This program follows the CIS-RAM, Tier 1 guidance.

We will focus on CIS Control Implementation Group 1 (CIS-IG1). An IG1 organization is small to medium-sized with limited IT and cybersecurity expertise to dedicate toward protecting IT assets and personnel. The principal concern of these organizations is to keep the business operational as they have a limited tolerance for downtime. 

We will use the CIS Election Infrastructure Assessment Tool (EIAT) to help document and formalize our progress. During our sessions, we will address cyber events, state compliance and other related activities when they occur. 

Get started today by contacting Scott Madlener at (312) 533-0105.