The corrected release reads: SANS MAPS SAP CYBERSECURITY TO TOP TWENTY CIS CRITICAL SECURITY CONTROLS ... and updated by cyber experts who pull data from a variety of public and private threat ...