Which of the following uses six initial steps that provide basic control over system security...

The Center for Internet Security (CIS) uses six initial steps that provide basic control over system security, including hardware and software inventory, vulnerability management, and continuous monitoring to minimize risk in all network environments. References:

CompTIA Security+ Certification Exam Objectives 1.1: Compare and contrast different types of security concepts.

CompTIA Security+ Study Guide, Sixth Edition, pages 15-16