As cyber threats grow more sophisticated, today’s businesses require more than just protective tools - they need trusted, foundational frameworks for deploying, operating, and continuously enhancing their cybersecurity in a sustainable way.

CMC Telecom’s official entry into the Center for Internet Security (CIS) as a Services & Consulting Member marks not only a global milestone but also a strategic commitment to aligning its information security services with internationally recognized standards. This move positions CMC Telecom as an integral part of the global cybersecurity ecosystem, bringing world-class practices to its Vietnamese customers.

CIS – The global cybersecurity ecosystem built on practical standards

For over two decades, the Center for Internet Security (CIS) has served as a trusted organization in the global cybersecurity community. Unlike traditional certification bodies, CIS operates as the standards backbone of the global cybersecurity ecosystem.

CIS unites over 4,000 member organizations, including:

Government agencies and critical infrastructure operators in the U.S., Europe, and other advanced economies - entities with the highest security demands.

Major global technology and cloud providers such as Google, Microsoft, and Amazon Web Services (AWS).

Leading cybersecurity and security service companies across domains like network, endpoint, cloud security, and SecOps/SOC - including Check Point, Palo Alto, Fortinet, Cisco, CrowdStrike, and others serving defense, finance, telecom, and IT sectors.

What sets CIS apart is its pragmatic foundation. Its standards are not theoretical; they are derived from real-world operations. Each framework is co-created with input from organizations running large-scale, mission-critical systems with the highest levels of reliability and security. As such, CIS frameworks represent applied global best practices, used in the most demanding infrastructure environments worldwide.

Two foundational pillars of the CIS framework

The CIS ecosystem revolves around two core standards:

CIS Controls – A prioritized list of cybersecurity actions designed to answer the question: “What should we do first to reduce risk quickly and effectively?”

CIS Benchmarks – Detailed, secure configuration guidelines for operating systems, cloud platforms, databases, networks, and applications. They address the question: “How should systems be configured securely and verifiably?”

CIS adheres to a clear philosophy: “Don’t just say it - prove it, measure it, and repeat it.”

This practical approach enables organizations worldwide to adopt, evaluate, and compare cybersecurity maturity in a transparent and consistent manner.

CMC Telecom’s role in the CIS ecosystem – Services & Consulting Member

CIS defines multiple membership categories based on an organization’s function and participation:

End User – Organizations applying CIS standards internally to safeguard their systems and data.

Academic – Institutions focused on advancing cybersecurity education and training.

Government (SLTT) – Local and regional government bodies receiving tailored cybersecurity support.

Services & Consulting – Providers who protect client data and systems across hosted, cloud, or managed environments (SaaS, IaaS, PaaS).

Product Vendor – Companies integrating CIS standards into their products or seeking CIS certifications.

CMC Telecom’s entry as a Services & Consulting Member underscores its broader strategy toward Security Platformization and Managed Security Services. This role goes beyond internal adoption - CMC Telecom is embedding CIS standards directly into the architecture, operations, and continuous improvement of its clients’ systems in Vietnam.

This positions the company as a crucial bridge, translating global standards into actionable, localized security practices tailored to Vietnam’s unique infrastructure and compliance landscape.

How CIS membership elevates CMC Telecom’s services

CMC Telecom’s engagement with CIS brings real, measurable benefits to its clients:

Internationally standardized security services: All security advisories, assessments, deployments, and operational services are based on CIS Controls and Benchmarks, offering a consistent, proven technical foundation instead of relying on individual experience or subjective decision-making.

Measurable and transparent security maturity: Clients can evaluate their current security posture, track improvements over time, and generate audit-ready reports aligned with international standards - essential for risk management and regulatory compliance.

Optimized investment and faster implementation: By focusing on high-impact, prioritized actions, organizations avoid fragmented investments and reduce the risk of misconfigurations - a common cause of cybersecurity breaches.

Long-term enhancement of security ecosystems: Operating on a unified CIS-based standard ensures continuous improvement, better SOC performance, faster incident response, and more efficient long-term risk management.

“Joining CIS as a Services & Consulting Member represents CMC Telecom’s commitment to elevating information security services. We aim to deliver not just technology, but a measurable, verifiable, and continuously improving security platform, aligned with Vietnam’s compliance requirements,” a CMC Telecom representative stated.

CMC Telecom’s CIS membership marks a key milestone in its journey toward standardization, global integration, and the creation of sustainable value for Vietnam’s information security ecosystem.

For clients, this milestone is a clear commitment: CMC Telecom’s security services are designed, implemented, and continuously enhanced using globally recognized standards - transparent, reliable, and built for the long term.

PV