A tailored course, built for your situation
Broader decision scope in your current role with CIS Controls
Earn wider authority over security initiatives without changing titles
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior support leader in a large enterprise environment managing infrastructure reliability and security compliance
Who this is not for
Individuals seeking certification prep or entry-level training in cybersecurity frameworks
What you walk away with
- Direct ownership of security control decisions across teams
- Expanded budget influence for infrastructure hardening initiatives
- Ability to set policy cadence without escalation
- Consolidated reporting lines from cross-functional teams
- First review on all control mapping updates
The 12 modules (with all 144 chapters)
Module 1. CIS Controls framework fundamentals
Build fluency in the structure, priority, and implementation logic of the CIS Controls to establish credibility and consistency in cross-team discussions.
12 chapters in this module
- What CIS Controls are
- Why 18 controls not 10
- Mapping to operational roles
- Control tier distinctions
- Benchmark versions compared
- Integration with audit cycles
- Common misalignments
- Control ownership models
- Metrics that matter
- Updating baselines
- Cross-platform applicability
- Maintaining version parity
Module 2. Operationalising control one
Turn inventory into action by leading asset and software accountability across hybrid environments without central IT dependency.
12 chapters in this module
- Hardware inventory standards
- Software inventory automation
- Cloud instance tracking
- Shadow IT detection
- Decommissioning workflows
- Ownership assignment
- License compliance links
- Patch cadence triggers
- Asset tagging policies
- Integration with IAM
- Reporting frequency
- Audit trail structure
Module 3. Secure configuration for systems and services
Define and enforce hardened baselines across servers, network devices, and cloud platforms using repeatable templates.
12 chapters in this module
- Baseline definition process
- CIS Benchmarks usage
- Golden image creation
- Configuration drift detection
- Automated remediation
- Change control sync
- Approval workflows
- Deviation logging
- Version control for configs
- Environment parity
- Cloud-native settings
- Emergency override protocols
Module 4. Access control expansion
Lead identity and privilege management decisions across departments by setting standards for least privilege and role-based access.
12 chapters in this module
- User role taxonomy
- Privileged account tiers
- Just-in-time access
- Break-glass procedures
- Session monitoring
- Credential rotation
- Multi-factor enforcement
- Access review cycles
- Delegation frameworks
- Contractor access rules
- SaaS application control
- Access certification
Module 5. Continuous vulnerability management
Own the vulnerability remediation lifecycle from scan to closure, setting cadence and severity rules that teams follow.
12 chapters in this module
- Scan scope definition
- Frequency standards
- Severity thresholds
- Patch prioritisation logic
- Remediation SLAs
- Exception handling
- False positive triage
- Third-party tool integration
- Reporting to leadership
- Trend analysis
- External scan coordination
- Zero-day response
Module 6. Defensible audit trails
Ensure logs are centralised, protected, and useful for investigations and compliance reviews without relying on external teams.
12 chapters in this module
- Log retention policies
- Centralised collection
- Immutable storage
- Retention compliance
- Log integrity checks
- Searchability standards
- Correlation tactics
- Incident readiness
- Regulator access prep
- Audit file packaging
- Log ownership
- Log review cadence
Module 7. Email and web browser protection
Set organisation-wide standards for secure email handling and browsing practices that reduce risk and improve response times.
12 chapters in this module
- Phishing filter rules
- URL rewriting standards
- Browser extension control
- User training content
- Threat intelligence feeds
- Mail gateway settings
- Sandboxing deployment
- Sender reputation checks
- Content filtering
- Mobile email security
- Incident reporting flow
- Policy enforcement
Module 8. Malware defence at scale
Design and enforce endpoint protection policies that integrate with existing tools and provide measurable reduction in incidents.
12 chapters in this module
- Antivirus standardisation
- EDR deployment
- Signature update cycles
- Quarantine procedures
- Ransomware detection
- Endpoint visibility
- Auto-containment rules
- Malware signature sharing
- Threat hunting workflows
- Incident escalation paths
- Recovery protocols
- Reporting metrics
Module 9. Data protection and encryption
Lead encryption strategy for data at rest and in transit, defining where and how protection is applied across systems.
12 chapters in this module
- Data classification schema
- Encryption key management
- At-rest encryption
- In-transit standards
- Database encryption
- File-level protection
- Cloud storage rules
- Decryption access
- Key rotation policies
- Compliance validation
- Audit trail linkage
- Recovery procedures
Module 10. Boundary defence configurations
Own firewall, segmentation, and network access control policies that align with business needs and security standards.
12 chapters in this module
- Firewall rule governance
- Network segmentation
- DMZ standards
- Access request workflow
- Rule review cadence
- Change logging
- Remote access controls
- IoT device policies
- Wireless security
- VPN configuration
- Zero trust alignment
- Traffic monitoring
Module 11. Multi-factor authentication leadership
Drive adoption and enforcement of MFA across applications and systems, overcoming resistance with clear policy and support structures.
12 chapters in this module
- MFA coverage targets
- Phased rollout plan
- User support setup
- Exception criteria
- Authentication methods
- Recovery options
- Monitoring adoption
- Reporting gaps
- Integration complexity
- User feedback loops
- Training content
- Policy enforcement
Module 12. Incident response ownership
Gain authority over incident detection, response, and post-mortem processes by building trusted, repeatable playbooks.
12 chapters in this module
- Detection rule setting
- Alert triage workflow
- Team activation
- Containment strategies
- Forensic data capture
- Legal coordination
- Post-mortem facilitation
- Remediation tracking
- Communication protocols
- Stakeholder updates
- Lessons integration
- Playbook maintenance
How this maps to your situation
- After audit findings require action
- When new systems come online
- Before policy renewal cycles
- During cross-team integration projects
Before vs. after
Before
Responsibilities limited to assigned tasks with frequent escalation for approvals
After
Autonomy to define, update, and enforce security controls across teams and systems
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, self-paced over 6-8 weeks
How this compares to the alternatives
Unlike generic cybersecurity courses, this program focuses specifically on expanding your decision scope using the CIS Controls framework, with templates and playbooks tailored to enterprise support leaders in technical environments.
Frequently asked
How is this different from a certification prep course?
This course is designed to expand your operational authority, not prepare you for an exam. It focuses on practical implementation and decision ownership within your current role.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me get promoted?
The course is focused on expanding your scope and influence in your current role, which often precedes formal promotion. Many practitioners see title changes as a result of increased responsibility.
$199 one-time. Approximately 3 hours per module, self-paced over 6-8 weeks.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours