A tailored course, built for your situation
Deeper command of the CIS Controls framework
Build unshakable fluency in the most actionable cybersecurity standard for enterprise environments
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior engagement leader in healthcare technology integration, responsible for aligning complex projects with security and compliance expectations
Who this is not for
Individuals seeking introductory cybersecurity training or certification prep, or those not involved in cross-functional system design or compliance validation
What you walk away with
- Map CIS Controls to real architecture decisions with confidence
- Anticipate auditor and reviewer pressure points in advance
- Guide teams through control implementation without defaulting to consultants
- Turn control documentation into repeatable, reusable playbooks
- Influence vendor security posture assessments using CIS benchmarks
The 12 modules (with all 144 chapters)
Module 1. CIS Controls framework foundations
Understand the structure, evolution, and intent of the CIS Controls, including how they map to NIST CSF and ISO 27001 for context-specific application.
12 chapters in this module
- What the CIS Controls are
- How they differ from other standards
- Control tiers explained
- Implementation groups defined
- Mapping to NIST CSF
- Mapping to ISO 27001
- Role of CIS RAM tool
- How controls are updated
- Prioritization logic
- Relationship to cloud environments
- Healthcare-specific examples
- Common misinterpretations
Module 2. Inventory of authorized and unauthorized devices
Master Control 1: how to establish and maintain a complete, accurate, and automated device inventory across hybrid environments.
12 chapters in this module
- Defining device scope
- Network-based discovery methods
- Agent-based tracking
- Cloud instance tracking
- Virtual and container tracking
- Rogue device detection
- Classification by criticality
- Integration with CMDB
- Automated alerts setup
- Review cycle cadence
- Exception handling
- Audit evidence collection
Module 3. Inventory of authorized and unauthorized software
Master Control 2: implement robust software monitoring and approval workflows to reduce attack surface.
12 chapters in this module
- Software inventory requirements
- Active discovery tools
- Whitelist policy design
- Blocking unauthorized installs
- SaaS application tracking
- License compliance linkage
- Shadow IT identification
- User behavior analysis
- Approved software list
- Update validation process
- Integration with patching
- Audit trail generation
Module 4. Secure configurations for hardware and software
Implement Control 3 with precision across endpoints, servers, and cloud platforms using benchmarks and automation.
12 chapters in this module
- Baseline definition process
- CIS Benchmarks usage
- Hardening policy templates
- Group policy application
- Cloud configuration rules
- OS-specific settings
- Application hardening
- Configuration drift detection
- Automated remediation
- Change control integration
- Exception management
- Compliance reporting
Module 5. Continuous vulnerability management
Operationalize Control 4 with scanning, prioritization, and workflow integration that keeps pace with modern release cycles.
12 chapters in this module
- Scanning frequency standards
- Internal vs external scans
- Authenticated scanning setup
- Cloud asset coverage
- Patch prioritization logic
- CVSS scoring application
- Risk-based exceptions
- Ticketing integration
- Developer notifications
- Remediation SLAs
- False positive handling
- Executive reporting
Module 6. Controlled use of administrative privileges
Enforce Control 5 with least privilege design, session monitoring, and credential lifecycle oversight.
12 chapters in this module
- Privileged account identification
- Just-in-time access design
- Password vault integration
- Session recording setup
- Break-glass procedures
- Role-based access control
- Time-bound permissions
- Privilege auditing
- Emergency override tracking
- Multi-factor enforcement
- Blast radius reduction
- Privilege creep detection
Module 7. Maintenance, monitoring, and analysis of audit logs
Implement Control 6 to ensure logs are complete, protected, and actionable across systems and teams.
12 chapters in this module
- Log source identification
- Centralized logging design
- Retention policy setup
- Encryption in transit
- Integrity protection
- Log normalization
- Correlation rule creation
- Retention by regulation
- Search capability design
- Access controls on logs
- Automated alerting
- Incident readiness
Module 8. Email and web browser protections
Strengthen Control 7 across user-facing applications with configuration, filtering, and awareness integration.
12 chapters in this module
- Browser hardening steps
- Email link scanning
- Attachment sandboxing
- Phishing simulation use
- URL filtering setup
- Certificate validation
- Plugin management
- User training integration
- Compromised credential alerts
- Domain-based message auth
- Click-rate monitoring
- Threat intel feeds
Module 9. Malware defenses
Deploy Control 8 with layered prevention, detection, and response capabilities tailored to organizational risk.
12 chapters in this module
- Endpoint protection tools
- Signature-based detection
- Behavioral analysis
- EDR deployment
- Ransomware-specific rules
- File reputation services
- Execution control setup
- Quarantine workflows
- Indicators of compromise
- Threat hunting integration
- Zero-day response plan
- Vendor performance review
Module 10. Limitation and control of network ports, protocols, and services
Implement Control 9 to reduce exposure through proactive network segmentation and service governance.
12 chapters in this module
- Port inventory process
- Default-deny philosophy
- Service justification
- Firewall rule auditing
- Micro-segmentation design
- Protocol monitoring
- Network access control
- Legacy system handling
- Change approval workflow
- Service timeout policies
- Encrypted traffic inspection
- Cloud VPC rules
Module 11. Data recovery
Implement Control 11 with reliable, tested backup processes that ensure resilience against ransomware and data loss.
12 chapters in this module
- Critical system identification
- Backup frequency standards
- Encryption of backups
- Air-gapped storage
- Recovery time objectives
- Test restoration process
- Immutable storage setup
- Offsite replication
- Backup monitoring
- Disaster recovery linkage
- Ransomware response integration
- Chain of custody
Module 12. Security awareness and skills training
Operationalize Control 14 with role-specific, behavior-driven programs that move beyond annual check-the-box training.
12 chapters in this module
- Role-based curriculum design
- Phishing simulation use
- Secure coding training
- Third-party onboarding
- Metrics that matter
- Behavior change tracking
- Leadership engagement
- Incident reporting culture
- New hire integration
- Refresher cadence
- Curriculum updates
- Effectiveness measurement
How this maps to your situation
- When onboarding a new healthcare system integration
- Before audit preparation cycles begin
- During vendor security assessments
- After a control gap is identified in review
Before vs. after
Before
Relying on consultants or patchwork documentation when addressing CIS Controls in engagements
After
Leading with authoritative, structured knowledge of the CIS Controls framework and applying it confidently across projects
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 2.5 hours per module, designed to be completed alongside active projects over 6, 8 weeks.
How this compares to the alternatives
Unlike generic compliance courses, this program focuses exclusively on the CIS Controls with real-world implementation patterns from healthcare and enterprise IT environments, giving you practical fluency, not just theory.
Frequently asked
Who is this course for?
Senior engagement leaders, technical program managers, and compliance leads who need to apply the CIS Controls confidently in complex, regulated environments.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is this certification prep?
No. This course builds practical mastery of the CIS Controls framework, not exam readiness. It’s designed for practitioners who lead real projects, not test takers.
$199 one-time. Approximately 2.5 hours per module, designed to be completed alongside active projects over 6, 8 weeks..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours