A tailored course, built for your situation
Influence across peer review and technical decision forums with CIS Controls mastery
Position yourself as the definitive voice in security architecture and control deployment
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Being overruled or deferred on technical security choices despite seniority
The situation this course is for
Strong security instincts often get diluted in cross-functional forums when there’s no shared control language. Even senior leaders find their input treated as one voice among many, especially when decisions favor speed over structure.
Who this is for
Senior technical leader influencing security posture without direct enforcement authority
Who this is not for
Individuals seeking compliance checklists or entry-level certification prep
What you walk away with
- Lead peer review sessions with documented CIS Controls alignment that others adopt
- Shape vendor selection criteria using prioritized CIS control mappings
- Command technical decision huddles with pre-built control justifications
- Drive consensus on security trade-offs using benchmarked implementation examples
- Become the named reviewer in architecture boards for high-risk deployments
The 12 modules (with all 144 chapters)
Module 1. CIS Controls 8.1 structure and priority tiers
Understand the hierarchy and risk-based sequencing of the CIS Controls framework, with emphasis on top-tier actions for cloud-scale environments.
12 chapters in this module
- Framework overview
- Control categories
- Implementation groups explained
- Top 5 priority controls
- Mapping to MITRE ATT&CK
- Control dependencies
- Benchmark sources
- Version 8.1 changes
- Organization fit assessment
- Control tiering logic
- Cross-platform applicability
- Adoption roadmap
Module 2. Inventory and control of hardware assets
Establish authoritative asset registries that withstand audit scrutiny and inform security decision-making across teams.
12 chapters in this module
- Asset discovery methods
- Active vs passive scanning
- Hardware classification
- Ownership assignment
- Lifecycle tracking
- Decommissioning protocols
- Integration with CMDB
- Cloud instance tagging
- Shadow IT detection
- Automated reconciliation
- Vulnerability linkage
- Reporting frequency
Module 3. Inventory and control of software assets
Build accurate software inventories to reduce attack surface and guide patching and access decisions.
12 chapters in this module
- Software discovery tools
- Approved vs unapproved lists
- Version tracking
- License compliance
- Retirement workflows
- Container image logging
- Serverless function tracking
- Package manager integration
- Change approval chains
- DevOps handoffs
- Decentralized deployment oversight
- Audit-ready reporting
Module 4. Data protection processes
Implement data classification and handling rules that align with CIS control expectations and operational needs.
12 chapters in this module
- Data categorization schema
- Sensitivity levels
- Encryption standards
- Access justification
- Retention policies
- Data loss prevention
- Egress monitoring
- Cloud storage tagging
- Database activity logging
- Anonymization techniques
- Third-party data handling
- Incident linkage
Module 5. Secure configuration management
Enforce hardened baselines across systems using automated tools aligned with CIS Benchmarks.
12 chapters in this module
- Baseline definition
- CIS Benchmark usage
- OS hardening
- Cloud provider settings
- Application configuration
- Change thresholds
- Automated enforcement
- Exception management
- drift detection
- Patch timing
- Validation testing
- Rollback procedures
Module 6. Account management and access control
Implement least privilege and role-based access using scalable identity patterns.
12 chapters in this module
- User provisioning
- Role definitions
- Just-in-time access
- Privileged account monitoring
- MFA enforcement
- Access reviews
- Break-glass accounts
- Service account management
- Entitlement mapping
- Delegation controls
- Emergency access
- Audit trail completeness
Module 7. Continuous vulnerability management
Operationalize regular scanning and prioritization aligned with control expectations.
12 chapters in this module
- Scanner deployment
- Frequency by tier
- Criticality thresholds
- False positive handling
- Remediation SLAs
- Patch validation
- Zero-day triage
- Third-party risk linkage
- Developer feedback loops
- Reporting cadence
- Executive summaries
- Trend analysis
Module 8. Malware defense and endpoint protection
Deploy layered defenses with measurable control outcomes.
12 chapters in this module
- EDR versus antivirus
- Execution prevention
- Behavioral monitoring
- Quarantine workflows
- Threat hunting integration
- Signature updates
- Ransomware controls
- Mobile endpoint coverage
- Browser isolation
- Phishing response
- Incident correlation
- Recovery readiness
Module 9. Email and web browser protections
Reduce attack surface through proactive configuration and user resilience.
12 chapters in this module
- URL filtering
- Attachment blocking
- Link rewriting
- Browser sandboxing
- Credential theft prevention
- Tab isolation
- Extension governance
- User training integration
- Click rate tracking
- Phishing simulation
- Reporting mechanisms
- Policy enforcement
Module 10. Data recovery and backup integrity
Ensure recoverability with tested, immutable, and monitored backup systems.
12 chapters in this module
- Backup frequency
- Recovery point objectives
- Recovery time objectives
- Immutable storage
- Air-gapped copies
- Verification testing
- Ransomware resilience
- Cloud backup validation
- On-prem integration
- Legal hold procedures
- Retention alignment
- Automation triggers
Module 11. Network defense and segmentation
Implement zoning and inspection strategies that limit lateral movement.
12 chapters in this module
- Network mapping
- Zone definitions
- Firewall rule hygiene
- Micro-segmentation
- Encrypted traffic inspection
- DNS filtering
- Proxy usage
- Zero trust alignment
- East-west monitoring
- Breach containment
- Remote access controls
- IoT device handling
Module 12. Incident response and organizational readiness
Build repeatable, evidence-based response workflows tied to control objectives.
12 chapters in this module
- Playbook development
- Detection linkage
- Escalation paths
- Forensic data collection
- Legal coordination
- Stakeholder comms
- Tabletop exercises
- Post-mortem process
- Improvement tracking
- Cross-team integration
- Regulator readiness
- Lessons database
How this maps to your situation
- After security incident review
- Before major system rollout
- During vendor onboarding
- When updating architecture standards
Before vs. after
Before
You contribute to technical decisions, but your input competes with other senior voices without a structured foundation.
After
Your recommendations become the baseline for peer-reviewed architecture choices using trusted control frameworks.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for executive pacing with just-in-time application.
If nothing changes
Continuing with ad-hoc influence reduces your ability to shape technical direction when consensus is needed.
How this compares to the alternatives
Unlike generic CIS Controls training, this course integrates influence tactics with implementation precision, tailored to senior leaders operating at organizational scale.
Frequently asked
Is this course technical or strategic?
It bridges both, grounded in technical control implementation, designed to amplify strategic influence in decision forums.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will I receive a certification upon completion?
No, this course focuses on practical mastery and influence, not exam preparation.
$199 one-time. Approximately 3 hours per module, designed for executive pacing with just-in-time application..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours