Matthew Jerzewski Contributions From Matthew Jerzewski Blog Neither Pointless Nor Boring: Pop It and Lock It Down with CIS Controls Blog CIS Control 18 Penetration Testing Blog CIS Control 16 Application Software Security Blog CIS Control 15: Service Provider Management Blog CIS Control 04: Secure Configuration of Enterprise Assets and Software