Question 1

What is CIS IG1 and who is it for?

Accepted Answer

CIS Implementation Group 1 (IG1) is the foundational tier of the CIS Controls framework — 56 safeguards that every organisation should implement regardless of size or technical sophistication. It is specifically designed for small businesses with limited IT resources.

Question 2

How is CISScore different from the official CIS CSAT tool?

Accepted Answer

CISScore is designed for non-technical SMB owners. Our 44-question assessment uses plain English, takes 5 minutes, and maps directly to specific IG1 safeguards. The official CIS CSAT is a comprehensive enterprise tool requiring cybersecurity expertise to use effectively.

Question 3

Do the generated policies meet CIS Controls requirements?

Accepted Answer

Our tailored policies are aligned to CIS Controls v8.1 IG1 safeguards and reference specific safeguard numbers throughout. They are professional-grade policy templates ready to implement. We recommend having your IT advisor review them before formal adoption.

Question 4

How long does the assessment take?

Accepted Answer

The 44-question assessment takes approximately 5 minutes for a business owner familiar with their IT setup. All questions are in plain English — no technical expertise required.

Do you use automated tooling — such as DHCP logging, active network scanning, or a CMDB — to keep your asset inventory current?