Keith Watson introduced the Twenty Critical Controls for Cyber Defense.
File://20criticalcontrols.pdf