A tailored course, built for your situation
Mastering CIS Controls for Experienced Facilities and Office Managers
Deliver facility operations with defensible accuracy and stakeholder-ready precision
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Avoid last-minute revisions and audit revisits by producing polished, compliant outputs the first time
The situation this course is for
Facility leaders often face delayed sign-offs and repeated requests for clarification because operational documentation lacks alignment with control frameworks. This delays projects and undermines credibility.
Who this is for
Experienced Facilities and Office Managers in enterprise environments requiring compliance-aligned documentation and audit readiness
Who this is not for
Entry-level coordinators, temporary site leads, or teams not involved in compliance-facing facility operations
What you walk away with
- Polished, stakeholder-ready facility control documentation that requires no rework
- First-time accuracy in audit responses using CIS Controls mapping
- Repeatable templates for policy implementation and compliance evidence gathering
- Defensible rationale for control decisions grounded in CIS benchmark standards
- Streamlined coordination with internal audit and ESG teams using standardized outputs
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls in Facility Management
Understand how CIS Controls map to physical and operational environments, focusing on baseline security and compliance relevance for office and facilities teams.
12 chapters in this module
- Overview of CIS Controls framework
- Relevance to non-IT operational domains
- Control families and facility scope
- Benchmarking current practices
- Mapping physical access to CIS v8
- Asset inventory for non-IT assets
- Policy alignment fundamentals
- Documenting control ownership
- Evidence types for facilities
- Compliance stakeholder expectations
- Integration with corporate ESG goals
- Course roadmap and tools preview
Module 2. CIS Control 1: Inventory and Control of Enterprise Assets
Build a complete, accurate register of physical and digital assets under facility oversight using CIS Control 1 guidance.
12 chapters in this module
- Defining asset scope for facilities
- Tracking non-IT equipment inventory
- Serial and location tagging systems
- Automating data collection
- Maintaining update cycles
- Linking assets to risk registers
- Vendor asset inclusion rules
- Cloud-connected physical devices
- Mobile asset tracking
- Decommissioning workflows
- Audit readiness checklist
- Template: Asset register builder
Module 3. CIS Control 2: Inventory and Control of Software Assets
Identify software used in facilities operations and ensure compliance with licensing and security baselines.
12 chapters in this module
- Software used in building systems
- HVAC and access control software
- License tracking for ops tools
- Shadow software identification
- Patch status visibility
- Approved vendor lists
- Remote monitoring tools
- SaaS applications in facilities
- Integration with IT policy
- Reporting gaps to security teams
- Standardization roadmap
- Template: Software inventory matrix
Module 4. CIS Control 4: Data Protection
Apply data protection principles to sensitive employee and operational data managed by facilities teams.
12 chapters in this module
- Identifying PII in access logs
- Visitor data retention policies
- Secure handling of incident reports
- Data minimization in forms
- Physical file security
- Digital data access controls
- Encryption for mobile devices
- Retention schedules
- Cross-border data transfer
- Breach response coordination
- Training for frontline staff
- Template: Data handling playbook
Module 5. CIS Control 13: Controlled Use of Administrative Privileges
Govern physical access and system permissions for facilities staff with elevated access rights.
12 chapters in this module
- Defining administrative access
- Key holder authorization process
- Elevator override access
- Access control system admins
- Review cycle frequency
- Segregation of duties
- Privileged access logs
- Temporary access protocols
- Multi-person approval rules
- Biometric access management
- Audit trail configuration
- Template: Access review form
Module 6. CIS Control 14: Limitation and Control of Network Interactions
Secure networked systems used in facilities such as cameras, sensors, and building automation.
12 chapters in this module
- Identifying connected devices
- Network segmentation strategies
- Firewall rules for IoT systems
- Default credential removal
- Port access restrictions
- Monitoring for anomalies
- Vendor remote access rules
- Change management for systems
- Zero trust principles
- Incident detection triggers
- Response escalation paths
- Template: Device connectivity log
Module 7. CIS Control 16: Account Monitoring and Control
Maintain accurate user accounts for facilities systems and deprovision access promptly.
12 chapters in this module
- User provisioning workflows
- Role-based access assignments
- Hiring and onboarding sync
- Termination checklists
- Contractor access windows
- Periodic access reviews
- Account review automation
- Integration with HR systems
- Escalation for stale accounts
- Deactivation confirmation
- Audit reporting
- Template: Account review tracker
Module 8. CIS Control 18: Malware Defenses
Protect facilities systems from malware threats through proactive controls and hygiene practices.
12 chapters in this module
- Malware risk in building systems
- Antivirus on endpoint devices
- USB device policies
- Email filtering for ops staff
- Phishing awareness training
- Software download controls
- Patch deployment cadence
- Quarantine procedures
- Incident classification
- Forensic data collection
- Coordination with IT security
- Template: Malware response checklist
Module 9. CIS Control 20: Penetration Tests and Red Team Exercises
Prepare for and participate in security assessments of physical and digital facility systems.
12 chapters in this module
- Understanding red team scope
- Scheduling coordination
- Facility access for testers
- Physical security tests
- Door access challenge tests
- Camera blind spot reviews
- Social engineering awareness
- Reporting findings internally
- Prioritizing remediation
- Tracking closure of issues
- Stakeholder communication
- Template: Post-test action plan
Module 10. Documenting Operational Resilience
Produce stakeholder-ready documentation that demonstrates compliance with internal and external expectations.
12 chapters in this module
- Building evidence packages
- Writing for audit reviewers
- Control mapping clarity
- Standardized terminology
- Version control practices
- Cross-referencing policies
- Visualizing control flows
- Narrative consistency
- Executive summaries
- Appendix structure
- Review workflow setup
- Template: Compliance package builder
Module 11. Integrating with Corporate Risk Frameworks
Align facility operations with broader organizational risk and compliance programs using common control language.
12 chapters in this module
- Speaking the same risk language
- Mapping to NIST CSF
- Alignment with ISO 27001
- ESG reporting integration
- Internal audit collaboration
- Regulatory inspection prep
- Cross-functional coordination
- Risk register contributions
- Control overlap identification
- Gap analysis techniques
- Reporting to compliance leads
- Template: Risk alignment matrix
Module 12. Sustaining Quality Outputs Over Time
Implement a living control program that maintains accuracy and relevance across audits and leadership changes.
12 chapters in this module
- Update cycle design
- Change impact assessment
- Version control for policies
- Knowledge transfer planning
- Onboarding new staff
- Annual refresh process
- Feedback from audits
- Benchmarking against peers
- Continuous improvement loop
- Archiving old versions
- Success measurement
- Template: Maintenance calendar
How this maps to your situation
- Preparing for site-level compliance audit
- Responding to internal audit findings
- Supporting enterprise ESG initiative
- Onboarding new facilities staff
Before vs. after
Before
Submitting facility compliance documentation that triggers follow-up questions, revisions, and delays due to inconsistent control mapping and incomplete evidence.
After
Producing polished, aligned, and auditable outputs on the first pass, accepted without revision by internal and external reviewers.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 6 hours of focused work across 4 weeks, with flexible pacing and downloadable resources for offline use.
If nothing changes
Continuing to produce compliance deliverables that require rework creates friction with audit teams, delays project sign-offs, and positions facility leadership as reactive rather than strategic.
How this compares to the alternatives
Unlike generic compliance courses, this program is tailored to facilities leaders who must demonstrate control readiness without relying on IT teams. It focuses on actionable outputs, not theory, using real-world templates and decision guides.
Frequently asked
Is this course relevant for non-IT compliance?
Yes. It is designed specifically for facilities and office leaders who must meet compliance expectations using frameworks like CIS Controls outside traditional IT environments.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help with audit preparation?
Yes. Every module builds toward producing defensible, polished artefacts that stand up during audits and require no rework.
$199 one-time. Approximately 6 hours of focused work across 4 weeks, with flexible pacing and downloadable resources for offline use..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours