Skip to main content
Image coming soon

Deeper command of the CIS Controls implementation lifecycle

$199.00
Adding to cart… The item has been added

A tailored course, built for your situation

Deeper command of the CIS Controls implementation lifecycle

Master the framework behind resilient product infrastructure

$199 one-time
24-hour access provisioning 30-day money-back guarantee Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.

Who this is for

Senior product leader in a high-compliance tech environment responsible for translating security frameworks into shipped product outcomes

Who this is not for

Individuals looking for introductory compliance training or certification prep; this is not a general overview

What you walk away with

  • Complete internalization of all 20 CIS Controls with situational reasoning for prioritization
  • Ability to lead a CIS Controls gap assessment without external consultants
  • Templates for converting Control 14 (Secure Configurations) into Jira tickets
  • Playbook for driving audit-readiness sprints across product teams
  • Direct mapping from CIS Controls to SOC 2 trust principles for cross-framework leverage

The 12 modules (with all 144 chapters)

Module 1. Foundations of the CIS Controls framework
Understand the origin, evolution, and design intent of the CIS Controls. Learn how they differ from ISO 27001 and NIST CSF, and where they add unique value in product-driven organisations.
12 chapters in this module
  1. History of the CIS initiative
  2. Structure of CIS Controls v8
  3. Critical vs foundational controls
  4. Mapping to NIST CSF categories
  5. Integration with SOC 2 requirements
  6. Adoption patterns at large tech firms
  7. Control ownership models
  8. Gap assessment fundamentals
  9. Benchmarking tools available
  10. Automated scanning thresholds
  11. Staged rollout strategy
  12. Internal advocacy tactics
Module 2. Control 1 Inventory and Control
Master asset discovery and classification rules that scale. Build dynamic inventory systems that meet Control 1 requirements while minimising overhead.
12 chapters in this module
  1. Defining hardware scope
  2. Software asset taxonomy
  3. Cloud instance tagging standards
  4. API-driven discovery methods
  5. Agent vs agentless trade-offs
  6. Version tracking automation
  7. Orphaned account sweeps
  8. Decommissioning workflows
  9. Asset ownership assignment
  10. Integration with CMDB
  11. Real-time alerting triggers
  12. Monthly attestation design
Module 3. Control 2 Secure Configurations
Turn secure baselines into enforceable product requirements. Learn how to operationalise CIS Benchmarks across operating systems and cloud platforms.
12 chapters in this module
  1. CIS Benchmark structure
  2. Linux hardening rules
  3. Windows policy alignment
  4. Cloud provider baseline comparison
  5. Golden image creation
  6. Configuration drift detection
  7. Patch window coordination
  8. Immutable infrastructure rules
  9. Custom rule exceptions
  10. Toolchain integration
  11. DevOps team handoff
  12. Audit evidence packaging
Module 4. Control 3 Continuous Vulnerability Management
Deploy a tiered scanning strategy that prioritises exploitability and context. Shift from volume-based to risk-based triage.
12 chapters in this module
  1. Vulnerability scoring systems
  2. CVSS vs in-house weighting
  3. Scan frequency benchmarks
  4. False positive reduction
  5. Exploit availability tracking
  6. Threat intelligence feeds
  7. Prioritisation matrix design
  8. Ticket assignment logic
  9. Remediation SLAs
  10. Developer notification templates
  11. Roll-up reporting
  12. Executive summary creation
Module 5. Control 4 Controlled Use of Administrative Privileges
Design least-privilege workflows that don’t slow down engineering. Implement time-bound access and Just-In-Time models.
12 chapters in this module
  1. Privileged account definition
  2. Break-glass access rules
  3. JIT provisioning tools
  4. Session recording standards
  5. Credential rotation policies
  6. Multi-person approval logic
  7. Emergency override design
  8. Audit trail requirements
  9. Monitoring for misuse
  10. Training for execs and devs
  11. Phishing resistance
  12. Annual attestation format
Module 6. Control 5 Secure Configuration for Network Devices
Apply CIS Benchmarks to firewalls, routers, and switches. Build change workflows that maintain compliance.
12 chapters in this module
  1. Router configuration baseline
  2. Switch security settings
  3. Firewall rule documentation
  4. Change advisory board process
  5. Network segmentation standards
  6. Encryption requirements
  7. Remote access design
  8. DDoS protection alignment
  9. Configuration drift alerts
  10. Firmware update policy
  11. Vendor-specific deviations
  12. Penetration test follow-up
Module 7. Control 6 Boundary Defense
Architect layered network security zones. Implement segmentation and monitoring that meet Control 6 requirements.
12 chapters in this module
  1. Network zone taxonomy
  2. Ingress filtering rules
  3. Egress monitoring design
  4. Segmentation enforcement
  5. Microsegmentation use cases
  6. Proxy server configuration
  7. Tunnel encryption standards
  8. Threat-facing posture
  9. DNS query logging
  10. NetFlow analysis setup
  11. Anomaly detection thresholds
  12. Incident escalation paths
Module 8. Control 7 Data Loss Prevention
Deploy DLP strategies that protect sensitive data without blocking innovation.
12 chapters in this module
  1. Data classification schema
  2. Regex pattern libraries
  3. Cloud storage monitoring
  4. Email attachment controls
  5. Endpoint DLP agents
  6. False positive tuning
  7. Incident response workflow
  8. User education playbooks
  9. PII detection accuracy
  10. Data residency alignment
  11. Exclusion request process
  12. Monthly report packaging
Module 9. Control 8 Malware Defenses
Implement layered anti-malware protections across endpoints and servers.
12 chapters in this module
  1. EDR solution selection
  2. Signature update frequency
  3. Behavioral analysis rules
  4. Quarantine procedures
  5. Sandboxing integration
  6. Phishing simulation
  7. User reporting mechanism
  8. Threat hunting playbooks
  9. Ransomware response steps
  10. Backup validation sync
  11. Employee training cadence
  12. Third-party tool audits
Module 10. Control 9 Limitation and Control of Network Ports
Enforce strict port and protocol control without breaking legitimate services.
12 chapters in this module
  1. Port registry creation
  2. Service-justification workflow
  3. Firewall rule reviews
  4. Protocol anomaly detection
  5. Encrypted traffic inspection
  6. IoT device integration
  7. Temporary exception process
  8. Automated compliance checks
  9. Penetration test alignment
  10. Vendor access rules
  11. Logging requirements
  12. Monthly attestation
Module 11. Control 10 Account Monitoring and Management
Implement strong lifecycle controls for user accounts across systems.
12 chapters in this module
  1. Provisioning automation
  2. Deprovisioning triggers
  3. Role-based access review
  4. Multi-factor enforcement
  5. Password policy design
  6. Session timeout standards
  7. Account lockout rules
  8. Service account governance
  9. Orphaned account sweeps
  10. Access review cadence
  11. Escalation paths
  12. Audit trail completeness
Module 12. Integration and Leadership
Lead cross-functional rollout and continuous improvement of the CIS Controls within product teams.
12 chapters in this module
  1. Stakeholder communication plan
  2. Training rollout strategy
  3. KPI definition
  4. Metrics dashboard design
  5. Audit preparation workflow
  6. Regulator Q&A prep
  7. Lessons learned process
  8. Framework evolution tracking
  9. Vendor assessment integration
  10. M&A due diligence use
  11. Thought leadership content
  12. Mentorship program launch

How this maps to your situation

  • Leading first internal CIS Controls assessment
  • Responding to audit findings
  • Onboarding new product teams to compliance
  • Improving remediation cycle time

Before vs. after

Before
Reliant on external consultants for control mapping and audit readiness
After
Confidently leads internal CIS Controls implementation and optimisation

What's included with your purchase

  • 12 modules with 12 chapters each (144 chapters)
  • Downloadable templates and worked examples for every module
  • Hand-built implementation playbook delivered alongside course access
  • 30-day money-back guarantee

Delivery and format

  • Course and learning environment access provisioned within 24 hours of purchase
  • Hand-built implementation playbook delivered alongside course access

Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.

Time investment: Approximately 18 hours total, designed for incremental completion alongside full-time work.

How this compares to the alternatives

Unlike generic compliance courses, this focuses exclusively on operationalising the CIS Controls within product-led engineering environments. No fluff, no theory, just actionable methods used in real high-trust technology organisations.

Frequently asked

Is this aligned with CIS Controls v8?
Yes, the entire course is based on CIS Controls v8 with implementation strategies updated for current cloud and DevOps practices.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I use this to train my team?
The course is licensed per individual, but many graduates use the templates and playbook to build internal training programs.
$199 one-time. Approximately 18 hours total, designed for incremental completion alongside full-time work..

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

30-day money-back guarantee· 144 chapters· Hand-built playbook included· Account access within 24 hours
!