A tailored course, built for your situation
Mastering CIS Controls for IAM Directors in Zero-Trust Architecture
Build unshakable identity governance frameworks with structured control mastery
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior IAM leader in a cloud-first, Zero-Trust environment with responsibility for control alignment, audit readiness, and cross-platform identity governance
Who this is not for
Entry-level security analysts, consultants without IAM program ownership, or teams focused solely on endpoint or network controls without identity integration
What you walk away with
- Confidently map CIS Controls 1, 20 to identity-specific risks in hybrid environments
- Draft audit-ready control narratives that stand up to internal and external review
- Lead cross-functional risk discussions with pre-built templates and reference benchmarks
- Deploy a repeatable CIS Controls implementation playbook tailored to cloud identity workflows
- Maintain consistent control coverage across AWS, CIAM, and federated identity platforms
The 12 modules (with all 144 chapters)
Module 1. CIS Controls Overview and Identity Relevance
Establish the foundation of the CIS Critical Security Controls with a focus on identity-specific interpretation. Learn how controls map to IAM workflows and Zero-Trust Architecture maturity levels.
12 chapters in this module
- Introduction to CIS Controls v8
- Control groups and implementation groups
- Identity-centric control priorities
- Mapping to NIST 800-53 overlap
- Zero-Trust alignment principles
- Cloud identity scope definition
- Control ownership models
- Audit expectations by control
- Benchmarking maturity levels
- Vendor tool limitations
- Human process dependencies
- Documenting control rationale
Module 2. Inventory and Control of Enterprise Assets
Master asset inventory practices with identity-linked tracking, focusing on dynamic cloud workloads and federated devices used in CIAM environments.
12 chapters in this module
- Asset discovery methods
- Dynamic tagging in AWS
- Identity-linked device profiling
- Orphaned account detection
- Real-time synchronization
- Integration with Okta platforms
- Automated decommissioning
- Role-based ownership rules
- Device trust scoring
- API-accessible logging
- Control verification cadence
- Audit trail preservation
Module 3. Inventory and Control of Software
Apply software inventory controls to identity-related apps and integrations, including third-party connectors and cloud-native services.
12 chapters in this module
- Application whitelisting
- Privileged app identification
- Shadow IT detection
- OAuth integration tracking
- App-to-identity mapping
- Decommissioning workflows
- Version control alignment
- Vendor risk inputs
- Automated alerting
- User behavior correlation
- License compliance
- Audit package generation
Module 4. Data Protection
Enforce data-centric controls within identity systems, including PII handling, access logging, and consent tracking across CIAM platforms.
12 chapters in this module
- Data classification tiers
- PII detection in logs
- Encryption key ownership
- Consent lifecycle tracking
- Access request logging
- Data residency rules
- User data portability
- Right to be forgotten
- Audit trail completeness
- Regulatory overlap
- Cross-border handling
- Incident linkage procedures
Module 5. Secure Configuration for Enterprise Assets
Implement secure baseline configurations for identity infrastructure components, including federation servers and SSO gateways.
12 chapters in this module
- CIS Benchmarks overview
- Hardening identity servers
- SSO gateway tuning
- Certificate lifecycle
- Session timeout policies
- MFA enforcement
- Federation signing keys
- Access logging standards
- Change control integration
- Automated compliance checks
- Patch alignment
- Drift detection
Module 6. Account Management
Strengthen identity lifecycle processes from provisioning to deprovisioning, including privileged access and role transitions.
12 chapters in this module
- Provisioning workflows
- Role-based access control
- Privileged account classification
- Just-in-time access
- Access review cadence
- Delegated administration
- Emergency access
- Break-glass procedures
- Segregation of duties
- Orphaned account cleanup
- Automated certification
- Integration with HR systems
Module 7. Access Control
Enforce granular access policies across systems using identity attributes and context-aware rules aligned with Zero-Trust principles.
12 chapters in this module
- Policy decision points
- Attribute-based access control
- Contextual evaluation
- Risk-based step-up
- Zone boundary enforcement
- Cross-domain policies
- API access control
- Service account rules
- Temporary access
- Policy conflict resolution
- Audit of access changes
- Control logging
Module 8. Continuous Vulnerability Management
Integrate identity systems into vulnerability workflows, focusing on patch gaps and configuration drift in authentication services.
12 chapters in this module
- Vulnerability scanning scope
- Authentication service testing
- Patch prioritization
- Zero-day response
- Configuration drift alerts
- Third-party dependency checks
- Penetration test inclusion
- Log monitoring integration
- Remediation SLAs
- Escalation procedures
- Vendor coordination
- Reporting cadence
Module 9. Audit Log Management
Design comprehensive logging for identity events, ensuring retention, accessibility, and correlation with security monitoring systems.
12 chapters in this module
- Log collection scope
- Identity event types
- Retention policies
- Encryption at rest
- Immutable storage
- Cross-system correlation
- SIEM integration
- Query performance
- Incident response access
- Regulatory compliance
- Audit package automation
- Chain of custody
Module 10. Email and Web Browser Protection
Extend identity controls to email and browser-based threats using phishing resistance and session protection techniques.
12 chapters in this module
- Phishing-resistant MFA
- Session hijacking prevention
- Browser extension policies
- URL filtering integration
- Identity-based email rules
- Impersonation detection
- User reporting tools
- Training integration
- Incident triage
- Compromised account response
- Recovery workflows
- Forensic collection
Module 11. Malware Defenses
Strengthen endpoint detection and response through identity-linked behavior baselining and access revocation triggers.
12 chapters in this module
- Endpoint detection rules
- User behavior baselines
- Anomalous login detection
- Automated revocation
- Quarantine workflows
- Reputation scoring
- Fileless attack detection
- Memory scanning
- Network traffic analysis
- Integration with IAM
- User notification
- Remediation tracking
Module 12. Incident Response and Recognition
Turn proven control mastery into professional recognition through documented incident readiness, peer consultation, and leadership visibility.
12 chapters in this module
- Incident playbook structure
- Role assignment clarity
- Communication templates
- Regulator engagement
- Post-mortem documentation
- Lessons learned tracking
- Cross-functional coordination
- Executive briefings
- Control effectiveness reporting
- Peer consultation patterns
- Visibility best practices
- Recognition through consistency
How this maps to your situation
- Before first audit cycle
- After framework deployment
- During vendor review
- When leadership requests risk posture
Before vs. after
Before
Relies on ad-hoc control mapping and inconsistent documentation across teams
After
Deploys standardized, audit-ready CIS Controls implementation across identity systems with peer recognition
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-5 hours per module, with flexible pacing over 6-8 weeks
How this compares to the alternatives
Unlike generic compliance courses, this program focuses exclusively on CIS Controls as applied to identity and Zero-Trust Architecture, with templates and examples calibrated for cloud-first environments like AWS and Okta CIAM.
Frequently asked
Is this course focused on Okta-specific implementation?
No. The course avoids referencing Okta or Auth0 directly. It focuses on CIS Controls mastery within cloud identity and Zero-Trust Architecture frameworks, applicable across platforms.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does the course include certifications or exam prep?
No. This course builds practical implementation skills, not exam readiness for CISSP, CISM, or similar certifications.
$199 one-time. Approximately 3-5 hours per module, with flexible pacing over 6-8 weeks.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours