A tailored course, built for your situation
Mastering CIS Controls for Consulting Engineers in Energy Infrastructure
Turn technical authority into consistent influence across design, certification, and vendor selection decisions
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Even strong technical input gets overruled when the validation narrative lacks framework-backed consistency
The situation this course is for
In energy projects, decisions on design, inspections, and vendor picks often revert to hierarchy when technical justification isn't tied to accepted control benchmarks. Without structured validation, even accurate recommendations can lose traction in peer review or certification panels.
Who this is for
Consulting Engineers in energy and resources who lead design validation, certification input, and technical procurement, where influence hinges on repeatable, defensible control application
Who this is not for
Entry-level engineers, pure project managers without technical oversight, or compliance staff without design or certification input
What you walk away with
- Command of all 18 CIS Controls with energy-sector implementation examples
- Worked templates for control mapping across design, inspections, and vendor selection
- Ability to lead certification-readiness cycles using CIS benchmarking
- Structured justification pathways for technical decisions backed by control outcomes
- Repeatable validation narratives that maintain influence across team changes
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls in Energy Infrastructure
Understand how CIS Controls map to real-world engineering decision points in upstream oil and gas projects, with emphasis on control ownership and cross-functional alignment.
12 chapters in this module
- Control adoption in asset-intensive environments
- CIS vs ISO and NIST frameworks
- Energy-sector threat profiles
- Control ownership models
- Integration with project lifecycle
- Design-phase control triggers
- Certification interface points
- Vendor evaluation touchpoints
- Inspection integration
- Peer review alignment
- Stakeholder communication protocols
- Documentation for audit readiness
Module 2. Control 1 Inventory and Control of Hardware Assets
Apply automated asset tracking to project design and inspection cycles, ensuring full visibility into certified equipment inventory.
12 chapters in this module
- Hardware asset classification
- Automated discovery tools
- Project integration timelines
- Certification documentation
- Change tracking protocols
- Decommissioning workflows
- Inspection alignment
- Vendor equipment onboarding
- Asset tagging standards
- Risk exposure mapping
- Patch impact analysis
- Reporting templates
Module 3. Control 2 Inventory and Control of Software Assets
Ensure software transparency in control systems and project tools, with emphasis on licensing, updates, and certification compliance.
12 chapters in this module
- Software classification schema
- License compliance tracking
- Approved software list
- Update management
- End-of-life planning
- Procurement integration
- Inspection readiness
- Certification documentation
- Vulnerability linkage
- Change control workflow
- Deployment tracking
- Reporting outputs
Module 4. Control 3 Continuous Vulnerability Management
Implement proactive scanning and remediation workflows aligned with project timelines and certification requirements.
12 chapters in this module
- Scan frequency protocols
- Automated scanning tools
- Vulnerability severity tiers
- Patch deployment workflows
- Project integration points
- Certification evidence
- Inspection documentation
- Vendor patch validation
- Risk acceptance process
- Escalation procedures
- Reporting cadence
- Executive summary templates
Module 5. Control 4 Controlled Use of Administrative Privileges
Secure privileged access in engineering environments with role-based workflows that support oversight and audit.
12 chapters in this module
- Privileged account definition
- Just-in-time access
- Session monitoring
- Escalation workflows
- Multi-factor enforcement
- Break-glass procedures
- Audit trail requirements
- Project team access
- Vendor access controls
- Review frequency
- Incident linkage
- Reporting formats
Module 6. Control 5 Secure Configuration for Hardware and Software
Enforce hardened configurations across systems using repeatable baselines tied to certification standards.
12 chapters in this module
- Configuration baselines
- CIS Benchmarks usage
- Automated compliance checks
- Change control process
- Design integration
- Inspection validation
- Certification evidence
- Remediation workflows
- Vendor configuration standards
- Audit reporting
- Exception tracking
- Documentation templates
Module 7. Control 6 Maintenance, Monitoring, and Analysis of Audit Logs
Ensure full traceability of technical decisions and system events with centralized logging aligned to audit needs.
12 chapters in this module
- Log retention requirements
- Centralized logging
- Event correlation
- Incident detection
- Inspection access
- Certification evidence
- Vendor log integration
- Storage security
- Analysis automation
- Retention policies
- Access controls
- Reporting tools
Module 8. Control 7 Email and Web Browser Protections
Reduce attack surface in engineering teams using hardened configurations and user training aligned with project needs.
12 chapters in this module
- Browser configuration
- Email filtering
- Phishing simulation
- User training
- Extension control
- Drive-by download prevention
- HTTPS enforcement
- Plugin management
- Remote work considerations
- Incident reporting
- Vendor communication
- Audit evidence
Module 9. Control 8 Malware Defenses
Deploy layered anti-malware strategies across project environments and endpoint devices used in field inspections.
12 chapters in this module
- Anti-virus deployment
- Endpoint detection
- Malware scanning
- Update frequency
- Zero-day response
- Incident containment
- Vendor system checks
- Field device protocols
- Removable media controls
- Quarantine workflows
- Reporting structure
- Certification documentation
Module 10. Control 9 Limitation and Control of Network Ports, Protocols, and Services
Harden network configurations in project environments to reduce exposure while maintaining operational needs.
12 chapters in this module
- Port inventory
- Protocol justification
- Service deactivation
- Firewall rules
- Change tracking
- Network segmentation
- Remote access
- Vendor network access
- Inspection connectivity
- Certification documentation
- Incident response
- Reporting templates
Module 11. Control 10 Data Recovery Capability
Ensure reliable backup and recovery of project data to support certification and continuous operations.
12 chapters in this module
- Backup frequency
- Automated verification
- Offsite storage
- Recovery testing
- Project lifecycle alignment
- Certification proof
- Inspection access
- Vendor data inclusion
- Encryption standards
- Retention periods
- Incident simulation
- Reporting outputs
Module 12. Control 11 Secure-by-Design Engineering Principles
Embed CIS Controls into early design phases, ensuring decisions carry influence through certification and implementation.
12 chapters in this module
- Threat modeling
- Design review checkpoints
- Control integration
- Vendor design validation
- Certification interface
- Peer review protocols
- Change impact analysis
- Risk documentation
- Stakeholder alignment
- Inspection readiness
- Lessons learned
- Playbook updates
How this maps to your situation
- Design-phase control integration
- Certification evidence preparation
- Vendor selection justification
- Inspection and audit follow-through
Before vs. after
Before
Technical input is solid but lacks structured influence in certification panels and vendor reviews
After
Control-backed validation gives your recommendations decisive weight in peer and executive discussions
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: 6-8 hours total over 4 weeks, with modular access to fit project cycles
If nothing changes
Without structured control application, even technically sound recommendations risk being overridden by procedural or hierarchical defaults in certification and procurement cycles
How this compares to the alternatives
Unlike generic compliance courses, this program is tailored to consulting engineers in energy who need influence in certification and vendor selection, not just checklist knowledge
Frequently asked
Is this course relevant to non-US engineering standards?
Yes, CIS Controls are globally applicable and widely adopted in energy sectors, including APAC and Australia, where they complement standards like AS/NZS and APRA CPS 234.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I use the templates in my current projects?
Yes, all templates are designed for immediate application in design, certification, and vendor evaluation workflows.
$199 one-time. 6-8 hours total over 4 weeks, with modular access to fit project cycles.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours