CIS Volunteer Diego Bolatti Adapts Cybersecurity Frameworks for SMEs
Summary
CIS community volunteer Diego Bolatti develops policy templates, teaches CIS Controls, and researches practical cybersecurity governance for SMEs. His SME-Cyber assessment platform is being prepared for pilot testing in Argentina.
Key points
- Bolatti helped create 13 CIS Controls policy templates covering areas including asset management, vulnerability management, and incident response.
- His doctoral research develops a cybersecurity framework for SMEs, combining maturity scoring, prioritized controls, resilience, awareness, and AI risk governance.
- SME-Cyber uses a CIS Controls v8.1 IG1 questionnaire, AI-assisted document analysis, a chatbot interviewer, and Wazuh integration.
- The platform generates a maturity dashboard, prioritized remediation roadmap with localized cost estimates, and an auditable technical report.
- SME-Cyber is being prepared for pilot testing with SMEs in Argentina’s NEA and Chaco regions.
- Bolatti teaches cybersecurity courses using CIS Controls v8.1 alongside ISO/IEC 27001 and NIST CSF 2.0.
Article Details
- Topic
- CIS Controls Community volunteer Diego Bolatti's contributions to cybersecurity policy templates, education, and SME-focused research and assessment tools.
People
Products
CIS ControlsCIS Controls Community Volunteer Spotlight: Diego BolattiISO/IEC 27001CIS Controls v8.1 provides the foundation of both courses, alongside ISO/IEC 27001 and NIST CSF 2.0, giving students a structured, standards-based understanding of cybersecurity.NIST CSF 2.0CIS Controls v8.1 provides the foundation of both courses, alongside ISO/IEC 27001 and NIST CSF 2.0, giving students a structured, standards-based understanding of cybersecurity.SME-CyberSME-Cyber: From Framework to Automated PlatformWazuhIntegration with the Wazuh SIEM platform