A tailored course, built for your situation
Mastering CIS Controls for Cyber Security Specialists
Turn evolving threat landscapes into structured, enforceable security postures with confidence.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Struggling to assert control over security decisions without executive buy-in?
The situation this course is for
Many security specialists are stuck reacting to directives instead of shaping them, despite being closest to the risks. Too often, they lack the structured authority to act decisively when threats shift.
Who this is for
Cyber Security Specialist at a major resource organization, responsible for implementing and maintaining security controls, with influence across IT and infrastructure teams.
Who this is not for
This is not for entry-level analysts, general IT staff, or executives seeking high-level overviews. It's specifically designed for practitioners who own control implementation and want greater autonomy.
What you walk away with
- Own the prioritization and deployment of Tier 1 and Tier 2 CIS Controls without escalation
- Produce documented mappings between CIS Controls and internal security policies
- Lead internal validation exercises using CIS benchmarks as the standard
- Confidently justify control exceptions with reference to framework guidance
- Shape the security control narrative during audits and cross-functional reviews
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls Framework
Establish foundational understanding of the CIS Controls structure, versioning, and applicability to large-scale resource operations.
12 chapters in this module
- Overview of CIS v8 structure
- Control families and prioritization
- Role of bench marking in security
- Mapping controls to NIST CSF
- Understanding implementation groups
- CIS vs ISO 27001 alignment
- How APRA CPS 234 maps to CIS
- Essential Eight overlap explained
- Control maturity levels
- Internal stakeholder expectations
- Audit readiness with CIS
- Version change tracking
Module 2. Inventory and Control of Hardware Assets
Ensure full visibility and management of all devices through automated, policy-enforced inventories.
12 chapters in this module
- Defining asset ownership
- Automated discovery methods
- Hardware lifecycle tracking
- Unauthorized device detection
- Endpoint compliance monitoring
- Integration with AD and MDM
- Asset classification tiers
- Decommissioning protocols
- Secure provisioning workflows
- BIOS/UEFI control standards
- Physical access logging
- Inventory reporting cadence
Module 3. Inventory and Control of Software Assets
Maintain accurate software ledgers and enforce approved execution policies.
12 chapters in this module
- Software inventory automation
- Whitelisting execution paths
- Unapproved software detection
- License compliance tracking
- Patch status visibility
- Signed software enforcement
- Application blacklisting
- Mobile app oversight
- Cloud software discovery
- SaaS usage monitoring
- Developer tool monitoring
- Shadow IT identification
Module 4. Data Protection
Classify, locate, and protect sensitive data across systems and storage layers.
12 chapters in this module
- Data classification schema
- Discovery of PII and sensitive data
- Encryption at rest and in transit
- DLP rule design
- Cloud storage protection
- Endpoint data leakage control
- Database activity monitoring
- Backup encryption standards
- Access logging for data stores
- Retention policy enforcement
- Data sovereignty considerations
- Cross-border transfer controls
Module 5. Secure Configuration of Enterprise Assets and Software
Enforce hardened baselines across devices and applications.
12 chapters in this module
- Benchmark development process
- CIS Benchmarks usage
- GPO enforcement strategies
- OS hardening templates
- Browser security settings
- Server configuration standards
- Cloud instance hardening
- Configuration drift detection
- Change approval workflows
- Automated compliance scanning
- Remediation playbooks
- Audit logging for changes
Module 6. Account Management
Implement least privilege and enforce identity lifecycle policies.
12 chapters in this module
- User provisioning standards
- Role-based access control
- Privileged account oversight
- Emergency access controls
- Shared account policies
- Multi-factor adoption
- Password policy enforcement
- Identity lifecycle automation
- Orphaned account detection
- Access review cycles
- Just-in-time elevation
- Service account security
Module 7. Access Control Management
Enforce network and application access based on policy and role.
12 chapters in this module
- Network segmentation design
- Firewall rule management
- Zero Trust principles
- VPN access controls
- Wireless access security
- Remote access logging
- Application-level access
- API authentication
- Time-bound access grants
- Geolocation-based restrictions
- Session timeout enforcement
- Privileged session monitoring
Module 8. Continuous Vulnerability Management
Identify, prioritize, and remediate vulnerabilities in a structured workflow.
12 chapters in this module
- Vulnerability scanning frequency
- CVSS scoring interpretation
- Patch prioritization logic
- Automated patch deployment
- Critical system exceptions
- Threat intelligence integration
- Zero-day response planning
- Third-party risk assessment
- Cloud workload patching
- OT and ICS considerations
- Escalation protocols
- Monthly reporting templates
Module 9. Audit Log and Monitoring
Centralize, protect, and analyze logs for detection and response.
12 chapters in this module
- Log source identification
- SIEM integration
- Log retention duration
- Encryption of log data
- Immutable storage setup
- User behavior analytics
- Threat detection rules
- Incident alerting
- Log review cadence
- Retention compliance
- Cross-system correlation
- Regulator-facing reporting
Module 10. Email and Web Browser Protections
Secure primary threat vectors used in phishing and exploit delivery.
12 chapters in this module
- Phishing simulation setup
- URL filtering
- Email attachment scanning
- DMARC policy enforcement
- Browser extension control
- HTTPS inspection
- Pop-up and redirect blocking
- Credential harvesting detection
- Web reputation services
- Click-time analysis
- User training integration
- Incident response integration
Module 11. Malware Defenses
Deploy layered anti-malware protections across endpoints and networks.
12 chapters in this module
- EDR solution selection
- Signature-based detection
- Behavioral analysis
- Sandboxing integration
- Ransomware-specific controls
- Boot-time scanning
- Fileless malware detection
- Macro execution blocking
- USB device control
- Quarantine protocols
- Threat hunting with EDR
- Incident isolation workflows
Module 12. Incident Response and Management
Prepare for, detect, and respond to security events using CIS-aligned playbooks.
12 chapters in this module
- Incident classification
- Response team activation
- Containment strategies
- Forensic data collection
- Legal and regulatory reporting
- Communication templates
- Post-incident review
- Playbook documentation
- Simulation exercises
- Stakeholder notification
- Regulator liaison process
- Lessons learned integration
How this maps to your situation
- When implementing a new control baseline
- During audit preparation cycles
- After detection of configuration drift
- Before onboarding new cloud services
Before vs. after
Before
Reactive approach to control changes, frequent escalations, delayed responses to audit findings
After
Proactive ownership of control decisions, direct authority over implementation choices, trusted advisor status across IT teams
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for integration into active control cycles.
If nothing changes
Without structured authority over control decisions, even strong practitioners remain reactive, delaying response, increasing audit friction, and missing opportunities to shape security direction.
How this compares to the alternatives
Unlike generic compliance courses, this program is built specifically for practitioners in resource-sector environments who need to act decisively within their current scope, not wait for approval.
Frequently asked
Is this focused on CIS v7 or v8?
The course covers CIS Controls v8 with mapping guidance to prior versions for continuity.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does it cover APRA CPS 234 alignment?
Yes, direct mappings between CIS Controls and CPS 234 requirements are included in relevant modules.
$199 one-time. Approximately 3 hours per module, designed for integration into active control cycles..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours