A tailored course, built for your situation
Mastering CIS Controls for Data and Systems Engineers
Build defensible, repeatable security frameworks that scale with infrastructure
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Engineers spend too much time reacting to audit gaps or retrofitting controls into deployed systems
Who this is for
Mid-to-senior data or systems engineers who own infrastructure integrity and are stepping into broader security or compliance influence
Who this is not for
Engineers focused only on query optimization or pipeline maintenance without infrastructure or control ownership
What you walk away with
- Translate CIS Controls into deployable system configurations
- Produce audit-ready control mappings without compliance team dependency
- Design security blueprints that become default templates across projects
- Gain assignment to high-visibility rollouts ahead of peer teams
- Reduce friction in cross-functional deployments by delivering pre-validated artefacts
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls in Modern Infrastructure
Ground your understanding of the CIS Controls framework within the context of cloud-scale data systems and operational resilience.
12 chapters in this module
- What CIS Controls are and why they matter
- Differences between CIS v8 and prior versions
- Mapping controls to data and systems roles
- How DISH and similar orgs apply CIS
- Control prioritization: where to start
- Integrating controls into CI/CD
- Common misconceptions about scope
- How compliance intersects with DevOps
- Identifying high-impact control families
- Using automation to enforce baselines
- Documenting design decisions for auditors
- Building credibility with security teams
Module 2. Inventory and Control of Hardware Assets
Establish a reliable, automated asset inventory to satisfy foundational CIS Controls and support future audits.
12 chapters in this module
- Defining hardware asset scope
- Tools for automated discovery
- Maintaining continuous visibility
- Classifying sensitivity levels
- Integrating with CMDB
- Handling virtual and cloud instances
- Reporting gaps proactively
- Aligning with patch cadence
- Tagging standards for traceability
- Secure remote access controls
- Decommissioning tracking
- Audit evidence preparation
Module 3. Inventory and Control of Software Assets
Extend control to software layers, ensuring only approved code runs in production environments.
12 chapters in this module
- Software inventory scope definition
- Automated scanning tools
- Whitelisting approved packages
- Detecting shadow IT software
- Version control integration
- License compliance tracking
- Decommissioning obsolete software
- Real-time alerting on deviations
- Software bill of materials (SBOM)
- Mapping to vulnerability data
- Reporting for executives
- Integration with deployment pipelines
Module 4. Data Protection and Classification
Implement structured data classification aligned with CIS Controls to guide access and encryption policies.
12 chapters in this module
- Defining data sensitivity tiers
- Automated classification tools
- Labeling at source
- Encryption standards by tier
- Access logging requirements
- Retention and deletion rules
- Handling PII and financial data
- Data flow mapping
- Third-party sharing controls
- Audit trail requirements
- Training developers on classification
- Periodic review process
Module 5. Secure Configuration of Enterprise Assets
Establish and maintain benchmarks for secure system configurations across platforms.
12 chapters in this module
- Defining secure baselines
- Using CIS Benchmarks
- Automated configuration checks
- Hardening cloud instances
- Managing admin privileges
- Disabling unnecessary services
- Patch management cadence
- Configuration drift detection
- Integration with IaC
- Documentation standards
- Reporting to security teams
- Audit preparation strategies
Module 6. Account Management and Access Control
Enforce least privilege and streamline identity lifecycle management.
12 chapters in this module
- User role definition
- Principle of least privilege
- Automated provisioning workflows
- Access reviews and recertification
- Service account management
- Multi-factor authentication enforcement
- Separation of duties checks
- Emergency access controls
- Integrating with IAM platforms
- Logging access changes
- Detecting privilege creep
- Audit evidence assembly
Module 7. Email and Web Browser Protections
Apply CIS Controls to user endpoints and prevent common attack vectors.
12 chapters in this module
- Standardizing browser settings
- Disabling risky extensions
- Enforcing safe search policies
- Blocking malicious sites
- Email filtering configurations
- Anti-phishing setup
- Sandboxed browsing environments
- User training integration
- Monitoring for anomalies
- Update management policies
- Mobile device protections
- Reporting suspicious activity
Module 8. Malware Defense and Endpoint Protection
Deploy and manage endpoint protection aligned with CIS recommendations.
12 chapters in this module
- Antivirus selection criteria
- Automated update policies
- Behavioral monitoring setup
- Endpoint detection and response
- Threat intelligence integration
- Incident response workflows
- False positive management
- Logging and alerting
- Quarantine procedures
- Regular control validation
- User communication plan
- Audit documentation
Module 9. Data Recovery and Backup Controls
Ensure recoverability through reliable, tested backup systems.
12 chapters in this module
- Defining recovery objectives
- Automated backup scheduling
- Testing restore procedures
- Immutable backup storage
- Offline backup protection
- Ransomware resilience
- Encryption of backup data
- Access controls for backups
- Version retention policies
- Monitoring backup success
- Third-party backup providers
- Audit-readiness of logs
Module 10. Security Awareness and Training
Develop training programs that reinforce technical controls through behavioral change.
12 chapters in this module
- Identifying key security behaviors
- Role-based training content
- Phishing simulation programs
- Tracking completion rates
- Engaging leadership involvement
- Reinforcement cadence
- Customizing for engineering teams
- Metrics for effectiveness
- Integrating with onboarding
- Reporting to compliance teams
- Updating content regularly
- Linking to incident data
Module 11. Incident Response Planning and Execution
Prepare and execute response plans aligned with CIS Control expectations.
12 chapters in this module
- Defining incident categories
- Team roles and responsibilities
- Automated detection rules
- Escalation workflows
- Forensic data collection
- Legal and regulatory reporting
- Post-incident review process
- Playbook documentation
- Tabletop exercise design
- Integration with SIEM
- Vendor coordination
- Audit trail preservation
Module 12. From Theory to Practice: Your Implementation Playbook
Assemble a personalized, hand-built implementation playbook to apply CIS Controls in your environment.
12 chapters in this module
- Choosing your first control set
- Stakeholder alignment
- Timeline planning
- Resource allocation
- Pilot project design
- Automation tooling
- Documentation standards
- Internal review cycle
- Feedback incorporation
- Rollout to production
- Monitoring and maintenance
- Scaling across teams
How this maps to your situation
- Onboarding new systems under compliance requirements
- Responding to audit findings with engineered solutions
- Designing infrastructure with built-in controls
- Leading cross-functional compliance initiatives
Before vs. after
Before
Reacting to compliance requests with fragmented documentation and manual fixes
After
Proactively delivering auditable, automated control implementations from the start
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-4 hours per module, or 40-50 hours total, designed to fit around full-time engineering roles.
If nothing changes
Continuing to rely on ad-hoc responses risks delayed deployments, repeated audit findings, and missed opportunities to lead high-impact projects.
How this compares to the alternatives
Unlike generic compliance courses, this program is built for engineers, focusing on deployable artefacts, automation, and real-world integration rather than policy abstraction.
Frequently asked
Is this course technical or compliance-focused?
It’s technical-first: written for engineers who need to implement controls, not just understand them. Every module delivers code-ready patterns and system designs.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I get templates I can use immediately?
Yes, each module includes downloadable, customizable templates for playbooks, control mappings, and deployment guides.
$199 one-time. Approximately 3-4 hours per module, or 40-50 hours total, designed to fit around full-time engineering roles..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours