Skip to main content
Image coming soon

Deeper command of the CIS Controls framework for security-first engineering

$199.00
Adding to cart… The item has been added

A tailored course, built for your situation

Deeper command of the CIS Controls framework for security-first engineering

Master the control baseline shaping modern platform security at scale

$199 one-time
24-hour access provisioning 30-day money-back guarantee Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.

Who this is for

Senior software engineer in a high-scale tech environment focused on secure system design and cross-functional control integration

Who this is not for

Entry-level developers, auditors without engineering background, or practitioners focused solely on physical or legacy IT security

What you walk away with

  • Complete fluency in CIS Controls mapping across cloud, container, and serverless environments
  • Faster control implementation through automation templates and modular design
  • Confidence leading security-by-design reviews with engineering teams
  • Ability to articulate control intent with precision to compliance and risk stakeholders
  • Recognition as the internal reference for control integrity under deployment pressure

The 12 modules (with all 144 chapters)

Module 1. Introduction to CIS Controls and their role in modern engineering
Understand how the CIS Controls evolved to meet cloud and DevOps demands, and why they’re adopted by leading platforms.
12 chapters in this module
  1. Origins of the CIS Controls
  2. How cloud changed security baselines
  3. Core principles of the framework
  4. Control tiers and applicability
  5. Mapping to engineering roles
  6. Integration with SDLC
  7. Common misconceptions
  8. Benchmarking against NIST CSF
  9. Adoption trends in tech giants
  10. Control ownership models
  11. Version 8 updates
  12. Getting started with implementation
Module 2. The Inventory of Authorized and Unapproved Devices
Master control 1: maintaining accurate device inventory across dynamic infrastructure.
12 chapters in this module
  1. Defining authorized devices
  2. Agent-based tracking
  3. Agentless discovery methods
  4. Cloud instance tagging standards
  5. Container inventory challenges
  6. Serverless footprint tracking
  7. Automated reconciliation
  8. Integration with CMDB
  9. Handling ephemeral workloads
  10. Thresholds for unapproved devices
  11. Real-time monitoring setups
  12. Incident response triggers
Module 3. The Inventory of Authorized and Unapproved Software
Apply control 2 to container images, binaries, and package managers.
12 chapters in this module
  1. Software whitelisting principles
  2. Package registry controls
  3. Container image provenance
  4. SBOM integration
  5. Binary attestation workflows
  6. Language-specific package risks
  7. Automated approval pipelines
  8. Open source license mapping
  9. Dependency tree analysis
  10. Drift detection mechanisms
  11. Remediation workflows
  12. Integration with CI/CD
Module 4. Secure Configurations for Hardware and Software
Implement controls 3 and 4 for endpoints, servers, and network devices.
12 chapters in this module
  1. Baseline configuration standards
  2. CIS Benchmarks usage
  3. Golden image pipelines
  4. Hardening Linux servers
  5. Browser security settings
  6. Endpoint management tools
  7. Configuration drift alerts
  8. Remediation automation
  9. Cloud storage encryption defaults
  10. IAM policy alignment
  11. Network device baselines
  12. Validation scanning schedules
Module 5. Continuous Vulnerability Assessment and Remediation
Operationalize control 5 with precision in high-velocity environments.
12 chapters in this module
  1. Vulnerability scanning cadence
  2. Prioritization by exploit likelihood
  3. CVSS vs. contextual risk
  4. Integration with ticketing
  5. Patch deployment windows
  6. Zero-day response protocols
  7. Automated triage workflows
  8. False positive reduction
  9. Developer notification loops
  10. SLAs for remediation
  11. Reporting completeness
  12. Toolchain integration
Module 6. Controlled Use of Administrative Privileges
Enforce control 6 across development, staging, and production environments.
12 chapters in this module
  1. Privileged account inventory
  2. Just-in-time access models
  3. Session recording setups
  4. Break-glass procedures
  5. Role-based access reviews
  6. PAM integration
  7. Service account governance
  8. Time-bound elevation
  9. Audit trail requirements
  10. Anomaly detection triggers
  11. Password vault integration
  12. Emergency override logging
Module 7. Mail and Messaging Security
Apply control 7 to internal platform communications and alerting.
12 chapters in this module
  1. Email header authentication
  2. Phishing simulation frequency
  3. Attachment sandboxing
  4. Internal comms encryption
  5. Calendar exploit prevention
  6. Automated threat containment
  7. User training cycles
  8. Impersonation detection
  9. Third-party service risks
  10. Mobile client security
  11. Logging metadata standards
  12. Incident escalation paths
Module 8. Malware Defenses and Endpoint Protection
Implement control 8 across heterogeneous device fleets.
12 chapters in this module
  1. EDR vs. traditional AV
  2. Behavioral analysis rules
  3. Ransomware containment
  4. Quarantine automation
  5. Threat intelligence feeds
  6. Host-based firewall policies
  7. USB device controls
  8. Memory protection settings
  9. Machine learning models
  10. False positive tuning
  11. Cross-platform consistency
  12. Performance impact monitoring
Module 9. Limitation and Control of Network Ports, Protocols, and Services
Apply control 9 to microservices, VPCs, and service meshes.
12 chapters in this module
  1. Default-deny network policies
  2. Service mesh configuration
  3. Firewall rule reviews
  4. Port scanning schedules
  5. Protocol whitelisting
  6. Service discovery controls
  7. Zero trust networking
  8. East-west traffic monitoring
  9. API gateway enforcement
  10. Legacy protocol retirement
  11. Encryption enforcement
  12. Network segmentation blueprints
Module 10. Data Recovery and Retention Controls
Implement control 10 for platform resilience and compliance.
12 chapters in this module
  1. Backup frequency by data class
  2. Encryption of backup media
  3. Recovery time objectives
  4. Immutable storage usage
  5. Cross-region replication
  6. Retention period enforcement
  7. Automated integrity checks
  8. Access controls on backups
  9. Audit logging for restores
  10. Disaster recovery drills
  11. Backup validation automation
  12. Ransomware resilience
Module 11. Secure Network Architecture and Segmentation
Apply controls 11 and 12 to cloud and hybrid networks.
12 chapters in this module
  1. Network zoning principles
  2. Demilitarized zone patterns
  3. Microsegmentation strategies
  4. Cloud network ACLs
  5. DNS security practices
  6. Load balancer hardening
  7. DDoS mitigation setups
  8. Traffic mirroring uses
  9. Encryption in transit defaults
  10. VLAN configuration audits
  11. Cross-account access rules
  12. Network policy as code
Module 12. Implementation and Continuous Improvement
Lead control adoption and refinement at engineering pace.
12 chapters in this module
  1. Assessment scoring models
  2. Gap tracking systems
  3. Roadmap prioritization
  4. Stakeholder communication
  5. Control automation ROI
  6. Benchmarking against peers
  7. Audit preparation process
  8. Feedback loops with teams
  9. Version upgrade planning
  10. Lessons from high-performers
  11. Personal mastery checklist
  12. Next steps for leadership

How this maps to your situation

  • After a security incident review
  • During cloud migration planning
  • Before external audit cycle
  • When onboarding new engineering teams

Before vs. after

Before
Intermittent control application, reactive compliance, fragmented ownership
After
Complete command of CIS Controls, proactive implementation, recognized internal authority

What's included with your purchase

  • 12 modules with 12 chapters each (144 chapters)
  • Downloadable templates and worked examples for every module
  • Hand-built implementation playbook delivered alongside course access
  • 30-day money-back guarantee

Delivery and format

  • Course and learning environment access provisioned within 24 hours of purchase
  • Hand-built implementation playbook delivered alongside course access

Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.

Time investment: Approximately 3 hours per module, designed to be completed in parallel with active projects.

How this compares to the alternatives

Unlike generic security certifications, this course focuses specifically on applied CIS Controls mastery within engineering workflows, with templates and examples tailored to high-scale software organizations.

Frequently asked

Is this course technical or managerial?
It's built for engineers who need technical depth with strategic context , you'll implement controls, not just assess them.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help with compliance audits?
Yes , you'll produce clear, traceable control mappings that stand up under scrutiny.
$199 one-time. Approximately 3 hours per module, designed to be completed in parallel with active projects..

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

30-day money-back guarantee· 144 chapters· Hand-built playbook included· Account access within 24 hours
!