A tailored course, built for your situation
Direct authority over Azure infrastructure decisions with CIS Controls
A tailored 12-module course to expand your remit in cloud operations and security governance
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior cloud engineer or infrastructure specialist with Azure expertise, operating as an individual contributor but with demonstrated ownership across hybrid environments and compliance-sensitive configurations.
Who this is not for
Entry-level administrators, managers focused only on budget or staffing, or teams seeking generic compliance checklists without technical depth.
What you walk away with
- Final sign-off capability on Azure security baselines aligned to CIS Controls
- Repeatable decision logic for network and identity policies in hybrid environments
- Documented framework for peer validation of configuration changes
- Proven audit trail for infrastructure decisions reducing escalation need
- Expanded scope in current role to include standalone compliance ownership
The 12 modules (with all 144 chapters)
Module 1. Defining your decision domain in Azure infrastructure
Establish clear boundaries for autonomous action based on CIS Controls Level 1 and 2 benchmarks, tailored to hybrid cloud environments with M-365 and on-prem dependencies.
12 chapters in this module
- Decision ownership vs approval
- Mapping CIS to Azure services
- Identifying owned components
- Baseline configuration roles
- Defining change thresholds
- Autonomy within compliance
- Documentation standards
- Peer validation triggers
- Escalation exceptions
- Integration touchpoints
- Policy enforcement levels
- Version control for decisions
Module 2. CIS Controls implementation for Azure IaaS
Apply CIS Benchmarks to virtual machines, disks, and networking with exact command-line references and deployment templates aligned to security baselines.
12 chapters in this module
- VM hardening checklist
- Disk encryption standards
- Network interface rules
- NSG rule optimization
- Logging enablement
- JIT access configuration
- Baseline image validation
- Patch compliance timing
- Host-based firewall setup
- Endpoint detection rules
- Secure boot enforcement
- CIS scoring automation
Module 3. Identity and access governance under CIS
Implement CIS Control 16 and 17 requirements in Azure AD, conditional access, and role assignments with precision for hybrid identity models.
12 chapters in this module
- Privileged account inventory
- MFA enforcement policies
- Guest user controls
- Role-based access design
- PIM configuration
- Conditional access rules
- Break-glass account setup
- Access review cadence
- Just-in-time provisioning
- CIS-aligned permission sets
- Service principal hardening
- Identity threat monitoring
Module 4. Secure networking with CIS benchmarks
Architect and sign off on Azure VNet, firewall, and DNS configurations that meet CIS Controls 9, 10, and 11 with documented rationale.
12 chapters in this module
- VNet segmentation rules
- DNS security settings
- Firewall rule baselines
- DDoS protection enablement
- Private endpoint usage
- Web Application Firewall setup
- CIS logging requirements
- Traffic filtering standards
- Zero trust network design
- Hybrid connectivity security
- DNS over HTTPS policy
- Network micro-segmentation
Module 5. Data protection and classification alignment
Map data handling workflows to CIS Control 13 and 18 with automated classification, retention, and encryption standards.
12 chapters in this module
- Data classification schema
- Azure Information Protection
- DLP policy design
- Encryption key ownership
- Backup compliance checks
- Retention tagging
- Data movement logging
- CIS data inventory rules
- Sensitive data workflows
- Cross-border data rules
- Storage account encryption
- Blob access logging
Module 6. Monitoring and logging for audit-ready operations
Configure Azure Monitor, Log Analytics, and Sentinel to meet CIS Control 8 with automated alerts and immutable logs.
12 chapters in this module
- Log retention periods
- Centralized logging design
- Alert severity levels
- CIS logging requirements
- SIEM integration
- Immutable log setup
- Query templates for audits
- Event collection scope
- Security event thresholds
- Incident timeline creation
- Baseline deviation alerts
- Automated log export
Module 7. Change management within CIS framework
Own the change lifecycle for Azure resources with pre-approved templates and documented rollback procedures aligned to CIS Control 14.
12 chapters in this module
- Change advisory board role
- Standard change templates
- Emergency change rules
- Rollback procedure design
- CIS configuration drift
- Automated compliance checks
- Pre-deployment validation
- Post-change verification
- Change window policies
- Peer review automation
- Documentation updates
- Version-controlled templates
Module 8. Vulnerability management with CIS priorities
Prioritize patching and remediation using CIS Critical Security Controls with Azure-native tool integration.
12 chapters in this module
- Vulnerability scoring model
- Patch compliance standards
- Automated scanning schedule
- Remediation SLA design
- Critical system exceptions
- CIS Top 20 alignment
- Asset criticality tagging
- Zero-day response plan
- Third-party tool integration
- Scan exclusion policy
- Risk acceptance workflow
- Executive reporting format
Module 9. Compliance mapping and reporting authority
Produce internal compliance reports and audit evidence packages using CIS Controls as the foundation, reducing dependency on external teams.
12 chapters in this module
- Control mapping exercise
- Evidence collection process
- Audit timeline ownership
- Internal review cycles
- CIS to NIST alignment
- Remediation tracking
- Executive summary writing
- Finding categorization
- Compliance dashboard design
- Stakeholder reporting
- Automated evidence generation
- Cross-framework alignment
Module 10. Vendor and third-party configuration oversight
Evaluate and approve third-party solutions and managed services against CIS benchmarks with standard assessment criteria.
12 chapters in this module
- Vendor onboarding checklist
- Third-party access rules
- Managed service SLAs
- CIS compliance verification
- Audit right requirements
- Data handling assurances
- Incident response clauses
- Patch management terms
- Configuration drift monitoring
- Reporting requirements
- Security questionnaire design
- Contractual compliance terms
Module 11. Disaster recovery and resilience planning
Design and validate DR plans for Azure workloads under CIS Control 11 with documented decision ownership.
12 chapters in this module
- Recovery point objectives
- Recovery time definitions
- Geo-redundant design
- Failover testing schedule
- CIS resilience standards
- Backup validation process
- DR runbook creation
- Cross-region sync rules
- Testing documentation
- Post-failover review
- Stakeholder notification
- Automated recovery steps
Module 12. Building a personal decision playbook
Compile reusable templates, rationale frameworks, and sign-off records to establish recognized authority in your environment.
12 chapters in this module
- Playbook structure design
- Decision rationale logging
- Template library creation
- Version control process
- Peer validation record
- Escalation avoidance tactics
- Audit preparation workflow
- Lessons learned review
- Stakeholder communication
- Continuous improvement loop
- Cross-team reference use
- Success metric tracking
How this maps to your situation
- When a new Azure subscription is provisioned
- Before a compliance audit cycle begins
- After a security finding is reported
- During third-party vendor integration
Before vs. after
Before
Requires peer validation or leadership approval for most Azure configuration changes, especially those touching security or compliance.
After
Owns final decision rights on critical Azure infrastructure configurations, with auditable rationale and peer-recognized authority.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters total)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for practitioners to complete one module per week while on the job.
How this compares to the alternatives
Unlike generic cloud security courses, this program focuses exclusively on expanding decision authority within your current role using the CIS Controls framework, with Azure-specific implementation playbooks and no reliance on external certifications.
Frequently asked
Who is this course designed for?
Senior Azure engineers and infrastructure specialists who already manage hybrid environments and want to expand their decision-making scope within security and compliance.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me get promoted?
This course is designed to expand your mandate in your current role, not prepare for a future title. The outcome is greater ownership of decisions, not a new job description.
$199 one-time. Approximately 3 hours per module, designed for practitioners to complete one module per week while on the job..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours