CISA has released a great resource called Cybersecurity Performance Goals (CPG) that outline a common set of protections that all organization could benefit from review and implementation to meaningfully reduce the likelihood and impact of known risks and adversary techniques.
For the current version of the report, visit CISA Cybersecurity Performance Goals (CPG) Report, and for an actionable checklist to review and track the goals, visit CISA Cybersecurity Performance Goals Checklist.
[Archived Copy of Cybersecurity Performance Goals (CPG) Checklist]