Skip to main content
Image coming soon

SEC7169 Mastering CIS Controls for Regional Risk Leaders

$199.00
Adding to cart… The item has been added

What is the CIS Controls for Regional Risk Leaders course about?

Senior risk and compliance leaders in regional or multi-jurisdictional roles who are expected to produce audit-ready, regulator-facing deliverables with minimal oversight.

Who is the CIS Controls for Regional Risk Leaders course for?

Senior risk and compliance leaders in regional or multi-jurisdictional roles who are expected to produce audit-ready, regulator-facing deliverables with minimal oversight.

What do you take away from the CIS Controls for Regional Risk Leaders course?

Own end-to-end CIS Controls deployment with documented sign-off authority Route regulator-facing reviews and M&A risk assessments to your desk by design Produce audit-ready artefacts that survive executive scrutiny Deflect peer escalations with pre-mapped control rationale and sourcing Build a repeatable implementation playbook that persists beyond team changes.

What's included with your purchase?

12 modules with 12 chapters each (144 chapters) Downloadable templates and worked examples for every module Hand-built implementation playbook delivered alongside course access 30-day money-back guarantee.

What does the CIS Controls for Regional Risk Leaders cover on delivery and format?

Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access. Time investment: Approximately 3 hours per module, designed for completion within 6 weeks while working full-time.

How does this compare to the alternatives?

Unlike generic compliance courses, this training maps every control to real-world deliverables like regulator-facing memos, audit packages, and M&A risk summaries.

What does the CIS Controls for Regional Risk Leaders cover on frequently asked?

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

How is the CIS Controls for Regional Risk Leaders delivered?

The CIS Controls for Regional Risk Leaders is fully self-paced with immediate online access after enrolment. Access does not expire and future updates are included at no cost. A certificate of completion is issued by The Art of Service when you finish.

Closely related courses: CIS Controls for Regional Cloud Leadership, CIS Controls for Regional Automation Leaders, CIS Controls for Regional Communications Leadership, CIS Controls for Regional Customer Fulfillment Leaders.

More answers: what you get with every course, refund policy, all help answers.

A tailored course, built for your situation

Mastering CIS Controls for Regional Risk Leaders

Build authority in operational risk with structured, regulator-ready frameworks

$199 one-time
24-hour access provisioning 30-day money-back guarantee Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.

Who this is for

Senior risk and compliance leaders in regional or multi-jurisdictional roles who are expected to produce audit-ready, regulator-facing deliverables with minimal oversight.

Who this is not for

Entry-level compliance staff, IT auditors without governance responsibilities, or practitioners focused solely on technical security controls without cross-functional escalation.

What you walk away with

  • Own end-to-end CIS Controls deployment with documented sign-off authority
  • Route regulator-facing reviews and M&A risk assessments to your desk by design
  • Produce audit-ready artefacts that survive executive scrutiny
  • Deflect peer escalations with pre-mapped control rationale and sourcing
  • Build a repeatable implementation playbook that persists beyond team changes

The 12 modules (with all 144 chapters)

Module 1. Foundations of CIS Controls
Establish core terminology, control families, and alignment with risk governance frameworks.
12 chapters in this module
  1. What are CIS Controls
  2. Control structure overview
  3. Mapping to NIST CSF
  4. Integration with ISO 27001
  5. Risk tier classification
  6. Implementation prioritization
  7. Control ownership models
  8. Baseline assessment design
  9. Gap analysis workflow
  10. Reporting control maturity
  11. Stakeholder alignment
  12. Documentation standards
Module 2. CIS Control 1 Inventory and Device Management
Master asset discovery, classification, and lifecycle tracking for all devices.
12 chapters in this module
  1. Device inventory methods
  2. Active directory integration
  3. Hardware tracking systems
  4. Software asset tagging
  5. Cloud instance monitoring
  6. Network discovery tools
  7. Ownership assignment
  8. Lifecycle status definitions
  9. Decommissioning workflows
  10. Mobile device controls
  11. Third-party hardware
  12. Automated reconciliation
Module 3. CIS Control 2 Data Protection
Implement data classification, handling, and retention consistent with compliance mandates.
12 chapters in this module
  1. Data sensitivity tiers
  2. Classification policies
  3. Encryption standards
  4. Data location tracking
  5. Retention periods
  6. DLP framework setup
  7. Backup integrity
  8. Data access logs
  9. Vendor data handling
  10. Breach response prep
  11. Legal hold procedures
  12. Audit trail preservation
Module 4. CIS Control 3 Secure Configuration
Establish and maintain secure baselines for all systems and software.
12 chapters in this module
  1. Configuration benchmarks
  2. CIS Benchmarks usage
  3. Hardening guides
  4. OS-specific settings
  5. Server configuration
  6. Database settings
  7. Application tuning
  8. Cloud configuration
  9. Change control process
  10. Automated compliance checks
  11. Vulnerability alignment
  12. Remediation tracking
Module 5. CIS Control 4 Continuous Vulnerability Management
Deploy systematic scanning, prioritization, and remediation workflows.
12 chapters in this module
  1. Scan frequency planning
  2. Tool selection criteria
  3. Asset coverage scope
  4. Scan scheduling
  5. Severity classification
  6. CVE mapping
  7. Risk-based prioritization
  8. Remediation SLAs
  9. Patch validation
  10. False positive review
  11. Reporting cadence
  12. Executive summaries
Module 6. CIS Control 5 Controlled Use of Administrative Privileges
Manage elevated access with justification, review, and time-bound approvals.
12 chapters in this module
  1. Privilege inventory
  2. Role-based access
  3. Just-in-time elevation
  4. Session monitoring
  5. Password vaulting
  6. Break glass procedures
  7. Access review cycles
  8. Escalation logging
  9. Multi-person approval
  10. Temporary access
  11. Privilege creep detection
  12. Audit trail completeness
Module 7. CIS Control 6 Email and Web Browser Protections
Secure primary attack vectors through policy, configuration, and monitoring.
12 chapters in this module
  1. Browser security settings
  2. Email attachment filtering
  3. URL rewriting
  4. Phishing simulation
  5. User training frequency
  6. Extension control
  7. JavaScript restrictions
  8. Tab isolation
  9. Click tracking
  10. Spoof detection
  11. Header analysis
  12. Incident triage
Module 8. CIS Control 7 Malware Defense
Deploy layered anti-malware strategies across endpoints and networks.
12 chapters in this module
  1. Antivirus selection
  2. Real-time scanning
  3. Cloud workload protection
  4. Endpoint detection
  5. Sandboxing
  6. Heuristic analysis
  7. Ransomware rollback
  8. Zero-day response
  9. File reputation
  10. Command and control blocking
  11. Log aggregation
  12. Cross-system correlation
Module 9. CIS Control 8 Network Infrastructure Management
Ensure secure design, monitoring, and change control for all network components.
12 chapters in this module
  1. Network topology mapping
  2. Router hardening
  3. Switch configuration
  4. Firewall rule hygiene
  5. VLAN segmentation
  6. Wireless security
  7. Network monitoring
  8. Change control
  9. Remote access
  10. DNS security
  11. NTP integrity
  12. Physical security
Module 10. CIS Control 9 Data Loss Prevention
Detect and prevent unauthorized data transfers using technical and policy controls.
12 chapters in this module
  1. DLP policy creation
  2. Content inspection
  3. Exfiltration detection
  4. USB control
  5. Cloud upload monitoring
  6. Email scanning
  7. Print monitoring
  8. Network egress
  9. Incident response
  10. False positive tuning
  11. User notification
  12. Legal review integration
Module 11. CIS Control 10 Incident Response Planning
Establish detection, triage, escalation, and recovery procedures.
12 chapters in this module
  1. Incident types
  2. Triage workflow
  3. Escalation paths
  4. Forensic collection
  5. Legal coordination
  6. External reporting
  7. Containment actions
  8. Eradication steps
  9. Recovery validation
  10. Post-mortem process
  11. Playbook updates
  12. Team training
Module 12. CIS Control 11 Audit Log Management
Enable centralized logging, review, and analysis for security and compliance.
12 chapters in this module
  1. Log source inventory
  2. Retention policies
  3. Centralized collection
  4. Log normalization
  5. Review frequency
  6. Anomaly detection
  7. Correlation rules
  8. SIEM integration
  9. Access controls
  10. Chain of custody
  11. Regulator access
  12. Audit preparation

How this maps to your situation

  • M&A due diligence
  • regulator-facing review
  • board-level risk briefing
  • peer escalation

Before vs. after

Before
Waiting for peer input or senior review before acting on risk findings
After
Owning the final decision on control implementation and review timing

What's included with your purchase

  • 12 modules with 12 chapters each (144 chapters)
  • Downloadable templates and worked examples for every module
  • Hand-built implementation playbook delivered alongside course access
  • 30-day money-back guarantee

Delivery and format

  • Course and learning environment access provisioned within 24 hours of purchase
  • Hand-built implementation playbook delivered alongside course access

Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.

Time investment: Approximately 3 hours per module, designed for completion within 6 weeks while working full-time.

If nothing changes
Work that should flow to you, like M&A risk assessments and regulator prep, gets routed to others due to unclear ownership or inconsistent methodology.

How this compares to the alternatives

Unlike generic compliance courses, this training maps every control to real-world deliverables like regulator-facing memos, audit packages, and M&A risk summaries.

Frequently asked

Who is this course for?
Senior risk and compliance practitioners responsible for multi-jurisdictional frameworks and executive-level deliverables.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I receive templates?
Yes, every module includes downloadable templates and real-world examples.
$199 one-time. Approximately 3 hours per module, designed for completion within 6 weeks while working full-time..

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

30-day money-back guarantee· 144 chapters· Hand-built playbook included· Account access within 24 hours