← CIS Controls v8 in plain English

CIS Controls v8 IG1 56 safeguards

Implementation Group 1 / Essential cyber hygiene

Written for a small organization with limited IT and security expertise, often one generalist who owns everything.

Think of it likeLocking the doors and windows before you argue about the alarm system.

In plain English

IG1 is the floor, not a starter tier you graduate out of. Every organization is expected to reach it, and the safeguards in it are chosen to blunt the most common untargeted attacks rather than to satisfy an auditor.

IG1 covers 56 of the 153 safeguards in CIS Controls v8. Each one below links to a plain-English translation.

Control 1: Inventory and Control of Enterprise Assets

Control 2: Inventory and Control of Software Assets

Control 3: Data Protection

Control 4: Secure Configuration of Enterprise Assets and Software

Control 5: Account Management

Control 6: Access Control Management

Control 7: Continuous Vulnerability Management

Control 8: Audit Log Management

Control 9: Email and Web Browser Protections

Control 10: Malware Defenses

Control 11: Data Recovery

Control 12: Network Infrastructure Management

Control 14: Security Awareness and Skills Training

Control 15: Service Provider Management

Control 17: Incident Response Management

Check yourself against it