CIS CSC v8.1 IG3 requirements: the external attack surface your program still ignores | Vulnox Blog