Implementation Group 2 (IG2) - Managed Security

Implementation Group 2 (IG2) - Managed Security is the tier of CIS Controls intended for organizations that have a defined security program, moderate resources, and a need to systematically manage cyber risk. It assumes basic policies and staff are in place and emphasizes consistent implementation, monitoring, and continuous improvement of the controls.