A tailored course, built for your situation
Deeper Command of the CIS Controls Framework
Build unshakable fluency in the most widely adopted security control baseline
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior technical sales and advisory practitioners influencing enterprise security adoption decisions
Who this is not for
Entry-level implementers, auditors solely focused on compliance checkboxes, or those without influence on deployment scope
What you walk away with
- Navigate all 18 CIS Controls with confidence and context
- Map control requirements to common technical configurations
- Anticipate validation criteria used in enterprise audits
- Explain prioritization logic behind Implementation Groups
- Lead discussions with confidence when security trade-offs arise
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls and Their Role in Enterprise Security
Establish foundational understanding of the CIS Controls structure, purpose, and adoption drivers across global enterprises.
12 chapters in this module
- What the CIS Controls are
- How they differ from NIST CSF
- The role of CIS in benchmarking
- Who adopts these controls
- How controls map to risk
- Origin and evolution of the framework
- Use cases in enterprise sales
- Alignment with ISO 27001
- Common misconceptions clarified
- Structure of Implementation Groups
- Control vs sub-control hierarchy
- How regulators reference CIS
Module 2. CIS Control 1 to 6: Inventory and Business Risk Foundation
Master the first implementation group focusing on asset management, software inventory, secure configurations, and account control.
12 chapters in this module
- Asset inventory requirements
- Network device tracking methods
- Software inventory scope
- Secure configuration benchmarks
- Auto-updating policies
- Account provisioning standards
- Credential management baseline
- Multi-factor enforcement
- Access review cadence
- Service account controls
- Firewall rule documentation
- Network segmentation basics
Module 3. CIS Control 7 to 10: Continuous Vulnerability Management
Develop fluency in scanning, prioritization, patching cadence, and email protection mechanisms.
12 chapters in this module
- Vulnerability scan frequency
- CVSS scoring interpretation
- Patch within 72 hours rule
- Antivirus coverage requirements
- Email filtering standards
- Malware protection scope
- Phishing simulation frequency
- Spam filtering configuration
- DNS filtering setup
- Endpoint detection baseline
- Remediation validation steps
- Exception handling process
Module 4. CIS Control 11 to 14: Secure Network and Access Architecture
Understand network segmentation, authentication, wireless security, and data protection expectations.
12 chapters in this module
- Network segmentation design
- Default-deny rule philosophy
- Access control lists usage
- Encrypted session enforcement
- Wireless authentication mode
- Guest network isolation
- Data classification standards
- Encryption in transit rule
- Encryption at rest scope
- Portable device encryption
- Session timeout configuration
- Remote access policy baseline
Module 5. CIS Control 15 to 18: Incident Response and Organizational Policy
Gain mastery over audit logging, incident response planning, change management, and staff training expectations.
12 chapters in this module
- Log retention duration
- Centralized log collection
- Time synchronization setup
- Event correlation baseline
- Incident response team definition
- Response plan documentation
- Tabletop exercise cadence
- Change control process
- Secure development lifecycle
- Staff training frequency
- Security awareness content
- Third-party risk considerations
Module 6. Mapping CIS Controls to Real-World Configurations
Translate control language into technical implementation patterns across enterprise environments.
12 chapters in this module
- How Control 4 applies to Windows
- How Control 4 applies to Linux
- Endpoint encryption deployments
- Firewall rule examples
- Email filtering configurations
- DNS filtering setup steps
- Active Directory group policy
- Mobile device management setup
- Cloud storage encryption
- SaaS application access controls
- Audit log setup for AWS
- Audit log setup for Azure
Module 7. Implementation Groups and Prioritization Logic
Understand how IG1, IG2, and tailored adoption pathways shape deployment strategies.
12 chapters in this module
- Purpose of Implementation Groups
- IG1 baseline scope
- IG2 additional requirements
- Determining IG eligibility
- Gap assessment process
- Roadmap sequencing logic
- Leadership sign-off steps
- Resource estimation model
- Vendor alignment checklist
- Internal stakeholder mapping
- Budgeting for control gaps
- Measuring progress toward IG2
Module 8. Auditor Expectations and Evidence Collection
Anticipate what assessors require for each control and how to streamline evidence gathering.
12 chapters in this module
- Common auditor questions
- Evidence types per control
- Interview preparation checklist
- Documentation formatting
- Screenshot standards
- Configuration file exports
- Timestamp verification
- Sampling methodology
- Exception justification
- Remediation tracking log
- Sign-off workflows
- Pre-audit validation steps
Module 9. Integrating CIS Controls with Other Frameworks
Align CIS Controls with NIST CSF, ISO 27001, and internal compliance programs.
12 chapters in this module
- Mapping CIS to NIST CSF
- CIS vs SOC 2 overlap
- Integration with ISO 27001
- Cross-walking control sets
- Avoiding duplicate effort
- Single evidence strategy
- Unified policy documentation
- Consolidated training approach
- Unified audit timeline
- Shared responsibility models
- Cloud provider alignment
- Third-party attestation usage
Module 10. CIS Controls in Sales Engineering and Customer Engagement
Leverage framework fluency to guide customer conversations and shape solution scope.
12 chapters in this module
- Positioning controls early
- Identifying customer maturity
- Gap analysis conversation
- Solution bundling logic
- Vendor comparison points
- Differentiating with depth
- Addressing competitive claims
- Risk-based prioritization
- Implementation timeline estimates
- Stakeholder communication plan
- Executive summary templates
- Customer readiness assessment
Module 11. Maintaining Compliance Over Time
Establish practices for continuous monitoring, change tracking, and control sustainability.
12 chapters in this module
- Automated control checks
- Configuration drift alerts
- Change review workflows
- Periodic access reviews
- Audit log retention checks
- Control ownership model
- Role rotation considerations
- Third-party reassessment
- Policy refresh cycle
- Training recertification
- Incident response updates
- Documentation version control
Module 12. Final Validation and Readiness for External Assessment
Prepare for external validation with confidence using proven readiness steps and stakeholder alignment.
12 chapters in this module
- Pre-assessment checklist
- Internal mock audit
- Evidence completeness review
- Stakeholder alignment
- Executive briefing prep
- Remediation backlog triage
- Scope finalization
- Auditor logistics
- Evidence delivery method
- Post-audit action plan
- Certification tracking
- Continuous improvement loop
How this maps to your situation
- Customer security readiness assessment
- Competitive positioning on controls depth
- Internal team alignment on control ownership
- Executive briefing on compliance posture
Before vs. after
Before
Surface-level familiarity with CIS Controls used in customer conversations
After
Confident, detailed command enabling precise guidance and strategic influence
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 6 weeks with real-world application.
How this compares to the alternatives
Unlike generic compliance courses, this program delivers specific implementation patterns, auditor expectations, and sales engineering applications tailored to senior practitioners influencing enterprise security adoption.
Frequently asked
Is this course technical or strategic?
It bridges both, focused on technical control understanding with strategic application in sales and advisory roles.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me respond to RFPs?
Yes, each control is paired with evidence standards and implementation examples used in real assessments.
$199 one-time. Approximately 3 hours per module, designed for completion over 6 weeks with real-world application..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours