IG3

IG3 is the full CIS Controls set, intended for organizations that employ security specialists across disciplines such as risk management, penetration testing, and application security, and that handle data subject to regulatory oversight. It covers all 153 safeguards and targets sophisticated adversaries rather than opportunistic attacks. Reaching IG3 implies mature detection, response, and testing programs.