A tailored course, built for your situation
Mastering CIS Controls for Investment Banking Vice Presidents
Build a self-reinforcing security posture that compounds across mandates and client engagements
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Investment Banking Vice President operating at the intersection of regulatory compliance, client assurance, and deal execution in a global financial institution
Who this is not for
Junior analysts looking for foundational compliance training or professionals outside financial services dealing with non-regulated infrastructure
What you walk away with
- Deploy CIS Controls as reusable templates across client engagements
- Reduce time spent on control scoping by leveraging past-mapped architectures
- Strengthen audit readiness through compoundable documentation
- Position yourself as the internal reference for control consistency across deals
- Accelerate client assurance cycles using pre-validated control narratives
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls in Financial Services
Establish the role of CIS Controls in investment banking contexts, emphasizing alignment with APRA CPS 234, client due diligence, and deal-specific security assurance.
12 chapters in this module
- Origins of the CIS Controls framework
- Relevance to financial services risk profiles
- Mapping CIS to regulatory expectations
- Integration with deal lifecycle stages
- Benchmarking control maturity
- Linking CIS to client assurance requirements
- Understanding implementation tiers
- Control prioritization by deal type
- CIS and third-party risk assessment
- Internal stakeholder alignment
- Documenting control inheritance
- Setting up a compounding control library
Module 2. CIS Control 1: Inventory and Control of Hardware Assets
Learn how to establish and reuse hardware asset inventories across engagements using automated tagging and ownership validation.
12 chapters in this module
- Defining hardware scope in banking environments
- Automated discovery methods
- Ownership validation workflows
- Integration with Nomura-like IT systems
- Client-facing hardware disclosure
- Version control for asset registers
- Reusing hardware profiles across deals
- Tagging for regulatory reporting
- Handling virtualized infrastructure
- Cloud provider inventory alignment
- Audit trail preparation
- Template reuse across mandates
Module 3. CIS Control 2: Inventory and Control of Software Assets
Develop standardized software tracking practices that compound across teams and client engagements.
12 chapters in this module
- Software identification techniques
- Licensing compliance tracking
- Version control integration
- End-of-life software detection
- Client assurance documentation
- Software risk tiering
- Cross-deal software baseline creation
- Automated update validation
- Reusability of software inventories
- Integration with patch management
- Reporting to senior stakeholders
- Template library for software disclosures
Module 4. CIS Control 3: Data Protection
Implement repeatable data classification and protection frameworks applicable across client data environments.
12 chapters in this module
- Data classification frameworks
- Encryption standards selection
- Data residency alignment
- Client data handling policies
- PII detection automation
- Cross-border data flow controls
- Reusing classification schemas
- Data loss prevention integration
- Audit documentation templates
- Data retention scheduling
- Client-specific data mappings
- Versioned data control playbooks
Module 5. CIS Control 4: Secure Configuration for Enterprise Assets
Build secure baselines for enterprise systems that are validated and reused across client projects.
12 chapters in this module
- Establishing secure configuration baselines
- Hardening web servers
- Operating system benchmarks
- Client-specific deviation tracking
- Automated compliance scanning
- Reusing hardened profiles
- Patch adherence validation
- Integration with CI/CD pipelines
- Documenting exceptions
- Cross-team configuration sharing
- Client assurance reporting
- Version-controlled baseline updates
Module 6. CIS Control 5: Account Management
Standardize identity and access management practices that compound across teams and engagements.
12 chapters in this module
- User provisioning workflows
- Role-based access control design
- Privileged account oversight
- Multi-factor enforcement
- Access review automation
- Reusing access control models
- Client identity integration
- Segregation of duties rules
- Centralized logging setup
- Audit trail generation
- Template-based access policies
- Cross-engagement identity patterns
Module 7. CIS Control 6: Access Control Management
Develop scalable access governance frameworks applicable across deal types and client environments.
12 chapters in this module
- Network access policy design
- Firewall rule standardization
- Zero trust alignment
- Client-specific segmentation
- Automated access reviews
- Reusing access control matrices
- Integration with identity providers
- Remote access safeguards
- Change approval workflows
- Audit documentation packaging
- Cross-mandate access templates
- Versioned control matrices
Module 8. CIS Control 7: Continuous Vulnerability Management
Deploy standardized scanning and remediation workflows that accumulate knowledge across engagements.
12 chapters in this module
- Vulnerability scanning frequency
- CVE prioritization frameworks
- Automated patch deployment
- Client-specific risk scoring
- Remediation tracking systems
- Reusing vulnerability baselines
- Integration with ticketing tools
- Third-party scan validation
- Reporting to client stakeholders
- Historical trend analysis
- Template-based findings packages
- Compoundable remediation playbooks
Module 9. CIS Control 8: Audit Log Management
Establish centralized, reusable logging practices that support compliance and client assurance efforts.
12 chapters in this module
- Log source identification
- Centralized SIEM integration
- Retention policy design
- Client-specific logging requirements
- Automated log analysis
- Reusing log correlation rules
- Incident response alignment
- Audit readiness packaging
- Cross-engagement log templates
- Normalization standards
- Reporting to oversight teams
- Version-controlled log playbooks
Module 10. CIS Control 9: Email and Web Browser Protections
Implement standardized browser and email security configurations that are portable across client-facing roles.
12 chapters in this module
- Email filtering configuration
- Phishing simulation integration
- Browser extension control
- Client communication security
- Reusing browser hardening profiles
- User awareness tracking
- Integration with security training
- Automated policy enforcement
- Client assurance documentation
- Cross-team browser baselines
- Versioned email security templates
- Scalable browser control deployment
Module 11. CIS Control 10: Malware Defenses
Build reusable endpoint protection strategies that compound across client environments.
12 chapters in this module
- Antivirus deployment standards
- EDR solution integration
- Malware signature updates
- Behavioral detection rules
- Client-specific policy tailoring
- Reusing defense configurations
- Automated threat response
- Incident escalation workflows
- Audit documentation packaging
- Cross-engagement malware baselines
- Version-controlled endpoint profiles
- Client assurance reporting
Module 12. Compounding Security Outcomes Across Mandates
Synthesize all controls into a reusable, compounding security framework for investment banking.
12 chapters in this module
- Integrating CIS Controls across deals
- Building a control inheritance model
- Reducing setup time for new mandates
- Creating client-specific assurance packages
- Strengthening re-engagement positioning
- Documenting compoundable artifacts
- Leveraging past playbooks
- Cross-team knowledge transfer
- Maintaining control versioning
- Scaling audit readiness
- Future-proofing control investments
- Finalizing the compounding security library
How this maps to your situation
- Client due diligence preparation
- Regulatory audit readiness
- Cross-border transaction assurance
- Internal governance reporting
Before vs. after
Before
Starting from scratch on control frameworks for each new client mandate, with limited ability to reuse past work.
After
Using a growing library of validated CIS Control implementations that accelerate delivery and strengthen consistency across deals.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 4-6 weeks with real-world application between modules.
How this compares to the alternatives
Unlike generic compliance training, this course delivers field-tested, banking-specific implementations of CIS Controls designed to compound across real client mandates , not just pass a certification exam.
Frequently asked
Is this course relevant to non-US banking regulations?
Yes. The course includes adaptations for APRA CPS 234, NIS2, and other regional frameworks as they intersect with CIS Controls.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I apply this to client-facing deliverables?
Yes. Each module includes templates and narratives designed for direct reuse in client assurance and due diligence processes.
$199 one-time. Approximately 3 hours per module, designed for completion over 4-6 weeks with real-world application between modules..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours