Which of the following best describes the CIS Controls?

Technical, administrative, and policy controls based on research provided by the SANS Institute

Technical controls designed to provide protection from the most damaging attacks based on current threat data

Technical controls designed to augment the NIST 800 series

Technical, administrative, and policy controls based on current regulations and security best practices