IG2

IG2 is the middle CIS Controls tier for organizations that have staff dedicated to managing IT infrastructure and that handle sensitive client or business data. It adds roughly 74 safeguards on top of IG1, introducing formal configuration management, network segmentation, centralized logging, and security awareness programs. IG2 assumes some in-house security capability rather than a single generalist.