A tailored course, built for your situation
Deeper Command of the CIS Controls Framework
Build repeatable, audit-ready security execution through structured mastery
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior operational leader in global tech or infrastructure, accountable for device governance, compliance scalability, and control consistency across regions
Who this is not for
Individuals seeking introductory cybersecurity training or general compliance overviews without focus on control execution
What you walk away with
- Complete command of all 18 CIS Controls and their implementation thresholds
- Direct mapping of controls to device lifecycle phases and ownership lanes
- Faster validation of control maturity during audits or external assessments
- Repeatable evidence-generation process for distributed device environments
- Internal authority on CIS Controls interpretation and adaptation
The 12 modules (with all 144 chapters)
Module 1. Foundations of CIS Controls
Establish the purpose, evolution, and priority structure of the CIS Controls in modern device governance.
12 chapters in this module
- Origin of the CIS Controls framework
- Role in global compliance alignment
- Hierarchy of 18 control groups
- Mapping to NIST CSF and ISO 27001
- Benchmarking control maturity levels
- Adoption patterns in global enterprises
- Control implementation sequence logic
- Critical security behaviors defined
- Role clarity across teams
- Automation readiness indicators
- Control ownership models
- Audit evidence expectations
Module 2. Inventory and Device Control
Master tracking, classification, and lifecycle enforcement for hardware across global fleets.
12 chapters in this module
- Hardware asset inventory standards
- Device ownership assignment
- Model-specific configuration baselines
- Decommissioning validation steps
- Virtual vs physical device tracking
- Cloud-hosted device inclusion
- Remote worker device registration
- Mobile device control thresholds
- BYOD exclusion criteria
- Automated discovery tools integration
- Serial number logging protocol
- Evidence collection workflow
Module 3. Secure Configuration Management
Define and enforce standardized secure baselines across all device types and operating systems.
12 chapters in this module
- Establishing gold images
- OS-specific hardening templates
- CIS Benchmarks utilization
- Configuration drift detection
- Patch compliance windows
- Default credential removal
- Uninstalling bloatware
- Secure boot enforcement
- Firmware update tracking
- Group policy integration
- Configuration change logging
- Rollback procedures
Module 4. Continuous Vulnerability Management
Operationalize scheduled scanning and prioritized remediation workflows across device types.
12 chapters in this module
- Vulnerability scan frequency
- Critical vs high severity threshold
- Automated CVE ingestion
- Patch validation steps
- Zero-day response protocol
- Third-party software tracking
- Asset tagging for risk tiering
- Remediation ownership lanes
- Escalation timelines
- Reporting to security teams
- Integration with ticketing systems
- Drift detection automation
Module 5. Controlled Use of Administrative Privileges
Enforce least privilege and just-in-time access models for device management.
12 chapters in this module
- Admin account inventory
- Named admin justification
- Time-limited access grants
- Break-glass procedure design
- Privileged session logging
- Multi-person approval rules
- Credential rotation frequency
- Session timeout enforcement
- Elevated access auditing
- Role-based access tiers
- Emergency override documentation
- Privilege creep detection
Module 6. Secure Authentication
Implement strong identity verification across devices and management interfaces.
12 chapters in this module
- MFA enforcement policies
- Biometric use cases
- Hardware token standards
- Passwordless adoption paths
- Single sign-on integration
- Credential phishing resistance
- Smart card deployment
- Certificate-based login
- Fallback authentication modes
- Session re-authentication
- Service account controls
- Authentication audit trails
Module 7. Boundary Defense
Design layered protection for device access at network edges and internal zones.
12 chapters in this module
- Firewall rule standardization
- Segmentation by device class
- Remote access controls
- Zero trust network access
- Intrusion prevention rules
- Network access control
- VPN logging standards
- Geolocation blocking
- DDoS mitigation readiness
- Traffic anomaly detection
- Port scanning policies
- Wireless network hardening
Module 8. Malware Defense
Deploy and verify endpoint protection aligned with CIS benchmarks.
12 chapters in this module
- Antivirus policy standards
- Real-time scanning enforcement
- Behavioral detection rules
- Ransomware rollback capability
- Quarantine procedures
- Signature update frequency
- Endpoint detection tools
- Threat intelligence feeds
- Sandboxed file analysis
- Auto-remediation triggers
- False positive review process
- Malware incident reporting
Module 9. Data Recovery
Ensure reliable, auditable backup and recovery processes across device fleets.
12 chapters in this module
- Backup frequency standards
- Critical data identification
- Encryption in transit and at rest
- Recovery point objectives
- Recovery time objectives
- Tested recovery drills
- Offsite storage protocols
- Immutable backup design
- Version retention periods
- Ransomware-resistant backups
- Chain of custody logging
- Recovery documentation
Module 10. Security Awareness Training
Operationalize continuous training tailored to device-specific risks.
12 chapters in this module
- Phishing simulation frequency
- Role-based content design
- New hire onboarding integration
- Mobile-specific threat modules
- Reporting mechanism clarity
- Click rate benchmarking
- Training completion tracking
- Executive participation goals
- Third-party vendor training
- Incident reporting pathways
- Culture measurement metrics
- Annual certification process
Module 11. Incident Response Planning
Build device-specific playbooks aligned with organizational resilience goals.
12 chapters in this module
- Incident classification tiers
- Device-specific breach scenarios
- Evidence preservation steps
- Reporting escalation paths
- Forensic imaging protocol
- Legal hold procedures
- Communication templates
- Cross-team coordination roles
- Regulatory reporting timelines
- Post-mortem review process
- Containment checklist
- Recovery validation steps
Module 12. Control Integration and Automation
Embed CIS Controls into operational workflows and tooling for sustained compliance.
12 chapters in this module
- API integration with device tools
- Automated control checks
- Dashboard reporting design
- Policy-as-code implementation
- CI/CD pipeline integration
- Audit readiness automation
- Control exception justification
- Continuous monitoring design
- Alert threshold tuning
- Remediation workflow triggers
- Evidence packaging for reviewers
- Framework update adaptation
How this maps to your situation
- When rolling out a new device class
- Before internal control review cycles
- During cross-border compliance audits
- After acquisition of new device fleets
Before vs. after
Before
Relying on fragmented interpretations of security controls across teams
After
Executing from a single, authoritative command of the CIS Controls framework
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for on-demand engagement across a 6-week period
How this compares to the alternatives
Unlike generic cybersecurity courses, this program delivers exact implementation logic for the CIS Controls across global device environments, with no abstraction and no filler.
Frequently asked
Who is this course designed for?
Senior operational leaders accountable for device governance, security control execution, and compliance scalability in global organizations.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does the course include templates?
Yes, every module includes downloadable templates and real-world examples tailored to device fleet governance.
$199 one-time. Approximately 3 hours per module, designed for on-demand engagement across a 6-week period.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours