Implementation Groups (IGs) are the recommended guidance to prioritize implementation of the CIS Critical Security Controls (CIS Controls). In an effort to assist enterprises of every size, IGs are divided into three groups.They are based on the risk profile and resources an enterprise has available to them to implement the CIS Controls.