Find comprehensive guides and documentation to help you get started with Safous, plus support if you get stuck.
Find all Safous compliance & security info in one place — certifications, policies, and audit details.
Download this checklist to see how Safous serves as a practical enabler for CIS Controls v8.1 adoption by providing the governance, identity, and accountability capabilities that several controls demand.
This compliance checklist maps CIS Controls v8.1 safeguards to the capabilities of Safous Privileged Remote Access. It is for IT, OT and security teams using the CIS Controls as a baseline, and it covers Control 5 (Account Management), Control 6 (Access Control Management) and Control 8 (Audit Log Management), plus guidance for OT/ICS environments.
| Requirement area | What it requires | How Safous supports it |
|---|---|---|
| Control 5: Account inventory and management (5.1, 5.6) | Keep an inventory of accounts and manage them centrally. | Connects to SAML, OIDC and LDAP identity providers, logs account activity, and vaults and injects service credentials to prevent hardcoded secrets. |
| Control 5: Passwords and admin privileges (5.2, 5.4, 5.5) | Unique passwords, dedicated admin accounts and a service account inventory. | Credential rotation, separate user and admin accounts, and automated provisioning and deprovisioning through approval workflows. |
| Control 6: Granting and revoking access (6.1, 6.2) | A defined process to grant and revoke access. | Approval workflows that record approver and date, immediate session termination and logged revocations. |
| Control 6: MFA (6.3, 6.4, 6.5) | MFA for external applications, remote access and admin accounts. | MFA enforced at the gateway before privileged sessions, with success and failure logged. |
| Control 6: Centralized and role-based access (6.6, 6.7, 6.8) | Inventory of authentication systems, centralized access control and RBAC. | One policy engine across IT, OT and cloud, role and attribute-based policies, and access privilege reports for reviews. |
| Control 8: Log management and collection (8.1, 8.2, 8.5, 8.9) | A documented logging process and centralized log collection. | Identity-bound session and action logs, centralized across IT, OT and hybrid sources, exportable in SIEM formats (syslog, JSON, CEF). |
| Control 8: Retention and review (8.10, 8.11) | Retain logs for at least 90 days and review them regularly. | Configurable retention with immutable archives, session playback and log search by user, system, time or activity. |
For OT/ICS environments, the checklist describes centralized, time-limited vendor access through approval workflows, agentless connectivity, and application-layer logging and recording of remote maintenance over SSH, VNC and HTTP.
It covers CIS Controls v8.1 Control 5 (Account Management), Control 6 (Access Control Management) and Control 8 (Audit Log Management), with OT/ICS guidance.
Yes. For safeguard 8.10, the checklist lists configurable retention policies, immutable archives and automated archival and purge.
No. The checklist states that businesses remain responsible for implementing and maintaining their own cybersecurity risk management programs.
Related resources: Regulatory compliance with Safous, Privileged remote access guide, Industrial secure remote access.
