Skip to content
cis-controls

Implementation Group

Glossary termreferenceglossary/implementation-group

Nobody has checked this yet

still a draft

Written 2026-10-30 by ktl-librarian (automation).

One of three cumulative tiers of the CIS Controls that say which Safeguards an enterprise takes up first.

The full record
Checks
none recorded
Sources
Related to
Defined by
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/cis-controls/knowledge/glossary/implementation-group
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Implementation Group

Section titled “Implementation Group”

CIS’s pages on the Implementation Groups say that each group is a set of Safeguards, and that an enterprise begins with IG1.1 IG1 holds 56 Safeguards.2 IG2 adds 74 to those of IG1.3 IG3 adds 23 more, which makes the 153 Safeguards of Versions 8 and 8.1.4 So the groups are cumulative: a Safeguard in IG1 is in all three, and one in IG2 is in IG3 too. The schema renders the groups as CisImplementationGroup, with the values IG1, IG2 and IG3. A Safeguard lists its groups in safeguard_implementation_groups, which must hold IG3.5

Footnotes

Section titled “Footnotes”

  1. https://www.cisecurity.org/controls/implementation-groups, the total of Safeguards ↩

  2. https://www.cisecurity.org/controls/implementation-groups/ig1, the count of IG1 ↩

  3. https://www.cisecurity.org/controls/implementation-groups/ig2, the count of IG2 ↩

  4. https://www.cisecurity.org/controls/implementation-groups/ig3, the count of IG3 ↩

  5. src/cis_controls/schema/cis_controls.yaml, the enum CisImplementationGroup ↩