IG1

IG1 is the CIS Controls baseline for small organizations with limited security expertise, defined as essential cyber hygiene. It is a subset of roughly 56 safeguards drawn from across all 18 controls, chosen because they counter the most common attack patterns and can be implemented with commodity tooling. Every organization is expected to reach IG1 before considering the larger IG2 and IG3 sets.