Developed and periodically updated by a global community of experts, the 20 controls are “the most effective and specific set of technical measures available to detect, prevent, respond, and mitigate damage from the most common to the most advanced of those attacks