A tailored course, built for your situation
Mastering CIS Controls for Senior Technology Evangelists
Produce more defensible, accurate, and polished governance narratives the first time, every time
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Avoid last-minute rewrites of control descriptions or weak responses to technical follow-ups
The situation this course is for
Even seasoned communicators face pushback when control mappings lack specificity or sound generic. The cost isn’t just time, it’s credibility.
Who this is for
Senior technology evangelists and public-facing engineers who translate security frameworks for broad audiences
Who this is not for
Entry-level auditors, compliance officers focused only on checklists, or practitioners without public messaging responsibilities
What you walk away with
- Deliver CIS Controls mappings with precise language that stands up to expert review
- Build reusable, source-cited narratives for common control families
- Reduce revision cycles when preparing public content or customer briefings
- Reference correct CIS sub-controls and implementation levels without lookup
- Produce stakeholder-ready summaries that preserve technical fidelity
The 12 modules (with all 144 chapters)
Module 1. Understanding the CIS Controls Framework
Overview of the 20 critical security controls, including structure, priority, and implementation levels.
12 chapters in this module
- Origins of CIS Controls
- Version evolution
- Control categories
- CIS v8 updates
- Mapping to MITRE ATT&CK
- Control maturity levels
- Implementation groups
- Alignment with NIST CSF
- Public vs private sector use
- Common misconceptions
- Use in cloud environments
- Linking to Zero Trust
Module 2. Control 1 Deep Dive
Detailed exploration of Inventory and Control of Enterprise Assets.
12 chapters in this module
- Defining managed assets
- Network discovery methods
- Agent-based tracking
- Cloud asset visibility
- Orphaned device risks
- Asset tagging standards
- Integration with CMDB
- Dynamic inventory updates
- Ownership assignment
- Decommissioning process
- Audit logging
- Control validation
Module 3. Control 2 Deep Dive
Inventory and Control of Software Assets.
12 chapters in this module
- Software inventory scope
- License tracking
- Approved software list
- Shadow IT detection
- Automated discovery tools
- Version control
- EOL software risks
- Software removal process
- Whitelisting basics
- SaaS application tracking
- Container image tracking
- Integration with DevOps
Module 4. Controls 3, 5 Deep Dive
Data protection, secure configurations, and account management.
12 chapters in this module
- Data classification framework
- Encryption standards
- Data retention policies
- OS configuration baselines
- Hardening checklists
- CIS Benchmarks
- Password policy design
- Privileged account tracking
- MFA implementation
- Session timeout rules
- Naming conventions
- Access review cycles
Module 5. Controls 6, 8 Deep Dive
Malware defense, patching, and backup strategies.
12 chapters in this module
- EDR vs AV comparison
- Signature-based detection
- Behavioral analysis
- Patch management lifecycle
- Critical vs non-critical patches
- Automated patching
- Testing environments
- Backup frequency
- Air-gapped backups
- Recovery testing
- Immutable storage
- Ransomware resilience
Module 6. Controls 9, 11 Deep Dive
Network defenses, firewall rules, and secure DNS.
12 chapters in this module
- Network segmentation
- Zero Trust principles
- Firewall rule review
- Default deny policy
- DNS filtering
- DNSSEC implementation
- Web proxy logs
- SSL inspection
- Outbound connection logging
- VPNs and remote access
- Micro-segmentation
- Cloud network controls
Module 7. Controls 12, 14 Deep Dive
Boundary defenses, intrusion detection, and logging.
12 chapters in this module
- Perimeter monitoring
- IDS vs IPS
- SIEM integration
- Log retention duration
- Centralized logging
- Log format standards
- Event correlation
- Threat hunting basics
- Log integrity checks
- Retention compliance
- Search optimization
- Alert tuning
Module 8. Controls 15, 17 Deep Dive
Vendor risk, incident response planning, and penetration testing.
12 chapters in this module
- Third-party assessment
- Vendor questionnaires
- Risk scoring models
- Incident response team
- Playbook development
- Tabletop exercises
- Post-mortem process
- Red team scope
- Vulnerability scanning
- External pentest
- Internal pentest
- Reporting standards
Module 9. Controls 18, 20 Deep Dive
Security training, penetration testing, and threat intelligence.
12 chapters in this module
- Security awareness topics
- Phishing simulation
- Training frequency
- Executive training
- Developer training
- Threat feed integration
- Indicators of compromise
- Threat actor profiling
- Geopolitical context
- Sector-specific risks
- Information sharing
- Threat modeling
Module 10. Communicating Controls to Non-Experts
Tailoring CIS language for executives, customers, and public audiences.
12 chapters in this module
- Ladder of abstraction
- Avoiding jargon
- Metaphor use
- Executive summaries
- Customer-facing decks
- Blogging about controls
- Public speaking
- Handling technical pushback
- Credibility signals
- Source citation
- Audience segmentation
- Message consistency
Module 11. Producing First-Time Quality Outputs
Ensuring accuracy, defensibility, and polish in published materials.
12 chapters in this module
- Pre-submission checklist
- Source verification
- Peer review process
- Tone consistency
- Visual clarity
- Reference libraries
- Template use
- Version control
- Feedback integration
- Revision reduction
- Output reuse
- Ownership tracking
Module 12. Maintaining Long-Term Control Relevance
Ensuring your materials stay current as frameworks evolve.
12 chapters in this module
- Version change tracking
- Update alerts
- Revalidation schedule
- Stakeholder notifications
- Archive management
- Link rot prevention
- Succession planning
- Knowledge transfer
- Public content updates
- Audit readiness
- Continuous improvement
- Lessons learned
How this maps to your situation
- When publishing a new security overview
- Before a customer-facing briefing
- During internal training development
- After a control framework update
Before vs. after
Before
Spending extra cycles revising control descriptions, facing technical pushback, or losing credibility on details
After
Publishing accurate, polished, and defensible materials on the first attempt
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 6 hours of core content, designed to fit within two weeks of part-time engagement.
If nothing changes
Continuing to rely on outdated or imprecise control language may lead to diminished trust in your technical narratives, especially as peer scrutiny intensifies.
How this compares to the alternatives
Unlike generic compliance courses, this program is tailored to public-facing technologists who must balance technical precision with broad accessibility.
Frequently asked
Who is this course designed for?
Senior technology evangelists, cloud advocates, and public-facing engineers who translate security frameworks into accessible content.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is prior CIS Controls experience required?
No, but familiarity with security frameworks will help. The course builds precision, not foundational knowledge.
$199 one-time. Approximately 6 hours of core content, designed to fit within two weeks of part-time engagement..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours