A tailored course, built for your situation
Mastering CIS Controls for Facilities Operations Leaders
Secure critical infrastructure through structured cyber-physical safeguards
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Facilities teams are now on the hook for cyber-physical control failures, but lack the structured response method
The situation this course is for
CIS Controls audits increasingly flag facility-level gaps in access logs, network-connected HVAC systems, and physical red team findings. Facilities coordinators are expected to respond but aren't given standardized remediation playbooks, leading to inconsistent evidence, delayed sign-offs, and repeated findings.
Who this is for
Facilities Operations Leader at a large technology or regulated infrastructure organization responsible for physical security, access control, and continuity planning
Who this is not for
IT security analysts, network engineers, or compliance officers whose primary responsibility is technical control ownership
What you walk away with
- Document and close control 13 findings related to unauthorized network connections in facility systems
- Respond to red team findings with time-stamped access logs and remediation narratives
- Build evidence packages for physical security control 1.7 (Multi-Factor Authentication) that pass first review
- Translate technical control failures into facility-level action plans
- Own the remediation track for CIS Controls findings without needing deep cyber expertise
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls in Physical Operations
Understand how global facilities teams are being pulled into CIS Controls compliance through control mappings to physical access, network-connected systems, and audit escalations from security teams.
12 chapters in this module
- How physical infrastructure is mapped to CIS Controls
- Common control gaps found in facility environments
- The role of facilities in cyber-physical compliance
- Understanding control priority levels and severity
- Key handoffs from security to facility teams
- Evidence expectations from internal audit
- How facilities leaders avoid repeated findings
- Case study: HVAC system breach via unpatched controller
- Mapping facility systems to CIS Control domains
- Documenting asset ownership for audit trails
- Building cross-functional awareness with IT teams
- Establishing baseline facility control posture
Module 2. Control 13: Network Monitoring and Facility Systems
Address unauthorized network connections in building management systems and IoT devices using standardized detection and reporting workflows.
12 chapters in this module
- Identifying network-connected facility systems
- Logging network access to HVAC and power controls
- Detecting unauthorized devices on facility networks
- Documenting permitted network activity patterns
- Responding to network anomaly escalations
- Integrating network logs into facility records
- Creating network access approval workflows
- Coordinating with IT on segmentation policies
- Documenting exceptions for maintenance access
- Reporting network findings to compliance teams
- Updating network controls after vendor work
- Maintaining evidence for continuous monitoring
Module 3. Control 1.7: Multi-Factor Authentication for Facility Access
Implement and document MFA enforcement for remote access to facility control systems in line with audit requirements.
12 chapters in this module
- Identifying systems requiring MFA enforcement
- Mapping MFA to remote access scenarios
- Documenting MFA implementation timelines
- Verifying MFA rollout across sites
- Capturing screenshots as evidence
- Recording user access methods and devices
- Handling emergency access exceptions
- Auditing MFA compliance quarterly
- Reporting MFA status to internal audit
- Addressing legacy system limitations
- Coordinating with security teams on updates
- Updating access policies after changes
Module 4. Physical Red Team Exercises and Response
Respond to red team findings with documented actions, timelines, and evidence that meet compliance review standards.
12 chapters in this module
- Understanding physical red team objectives
- Preparing facility teams for test events
- Documenting entry attempts and access points
- Logging test timing and personnel present
- Reporting findings to facility leadership
- Creating corrective action plans
- Setting remediation deadlines
- Verifying access control upgrades
- Retesting failed access points
- Compiling evidence for compliance teams
- Communicating outcomes to security sponsors
- Archiving exercise results for future audits
Module 5. Evidence Collection for Facility-Level Controls
Build audit-ready documentation packages for facility-related CIS Controls with proper scope, timestamps, and ownership.
12 chapters in this module
- Identifying required evidence types per control
- Capturing time-stamped photos and logs
- Documenting asset ownership and roles
- Creating facility-specific evidence templates
- Organizing evidence by control number
- Reviewing evidence completeness
- Handling evidence from third-party vendors
- Using checklists to reduce omissions
- Submitting evidence to compliance teams
- Receiving feedback on evidence quality
- Updating evidence after corrective actions
- Maintaining evidence archives for audits
Module 6. Remediation Planning for Control Gaps
Turn control findings into actionable facility-level remediation plans with clear ownership, timelines, and verification steps.
12 chapters in this module
- Receiving and triaging control findings
- Classifying gaps by severity and risk
- Assigning facility-level owners
- Setting remediation deadlines
- Identifying required resources
- Coordinating with IT and security teams
- Documenting action steps clearly
- Tracking progress in shared logs
- Escalating blockers promptly
- Verifying closure with evidence
- Reporting status to oversight groups
- Updating plans after site changes
Module 7. Vendor and Contractor Access Management
Manage temporary access for third parties while maintaining compliance with access control and logging requirements.
12 chapters in this module
- Defining contractor access policies
- Requiring MFA for all vendor logins
- Logging access start and end times
- Limiting access by time and system
- Requiring proof of MFA use
- Auditing vendor activity logs
- Debriefing after on-site work
- Revoking access immediately post-work
- Documenting exceptions for emergencies
- Training vendors on facility policies
- Tracking compliance across engagements
- Reporting access trends to security teams
Module 8. Facility-Level Asset Inventory and Control
Maintain accurate records of network-connected physical systems for audit and compliance purposes.
12 chapters in this module
- Identifying all facility-related IT assets
- Classifying assets by control sensitivity
- Documenting manufacturer and model details
- Recording IP addresses and locations
- Updating inventory after installations
- Tagging assets with serial numbers
- Linking assets to responsible personnel
- Verifying inventory quarterly
- Reporting discrepancies to IT
- Using inventory in incident response
- Sharing updates with security teams
- Archiving decommissioned asset records
Module 9. Incident Response Coordination for Facilities
Support incident response efforts by providing timely facility data and access records during security investigations.
12 chapters in this module
- Understanding incident response roles
- Providing access logs during investigations
- Documenting physical access during breaches
- Coordinating with security on entry points
- Preserving evidence after incidents
- Reporting suspicious activity promptly
- Updating access controls post-incident
- Participating in post-mortem reviews
- Improving processes from incident data
- Tracking recurring incident patterns
- Communicating changes to facility teams
- Maintaining incident response playbooks
Module 10. Cross-Team Communication Protocols
Build effective communication channels between facilities, IT, and security teams for seamless control execution.
12 chapters in this module
- Establishing regular sync meetings
- Creating shared communication platforms
- Defining escalation paths for issues
- Using standardized terminology
- Translating technical findings clearly
- Reporting facility actions to IT
- Receiving updates from security teams
- Clarifying roles and responsibilities
- Documenting decisions and actions
- Reducing miscommunication risks
- Improving response times through clarity
- Maintaining communication logs
Module 11. Audit Preparation and Readiness
Prepare facilities for internal and external audits with complete, accurate, and timely evidence packages.
12 chapters in this module
- Understanding audit timelines and scope
- Receiving audit request lists
- Gathering required evidence in advance
- Reviewing evidence for completeness
- Submitting packages on time
- Responding to follow-up requests
- Attending audit coordination meetings
- Clarifying facility-specific controls
- Receiving audit findings
- Prioritizing findings for action
- Updating processes based on feedback
- Archiving audit materials securely
Module 12. Sustaining Compliance Over Time
Maintain continuous compliance through regular reviews, updates, and knowledge transfer.
12 chapters in this module
- Scheduling periodic control reviews
- Updating documentation after changes
- Training new staff on compliance duties
- Conducting internal mock audits
- Tracking control performance metrics
- Identifying systemic improvement areas
- Updating facility policies annually
- Sharing best practices across sites
- Monitoring new CIS Controls revisions
- Adapting to evolving threats
- Building institutional knowledge
- Creating handover documentation
How this maps to your situation
- Control gaps in facilities operations
- Cross-functional handoffs with IT and security
- Evidence collection under audit scrutiny
- Sustained compliance in dynamic environments
Before vs. after
Before
Facility teams react to control findings without standardized processes, leading to inconsistent evidence, delayed responses, and repeated audit findings.
After
Facility leaders systematically own control remediation with clear workflows, documented evidence, and direct handoffs from security teams.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 2.5 hours per module, totaling around 30 hours for full course completion.
If nothing changes
Unaddressed control gaps can lead to repeated audit findings, increased incident risk, and escalation to leadership due to lack of documented remediation.
How this compares to the alternatives
Generic cybersecurity courses lack facility-specific context. Internal training often skips evidence standards. This course delivers targeted, audit-aligned methods for facilities leaders to own control remediation without becoming cyber experts.
Frequently asked
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does this course require technical IT knowledge?
No. It’s designed for facilities leaders who need to respond to findings without deep technical expertise.
Can I use this across multiple locations?
Yes. Templates and workflows are scalable across single or multi-site operations.
$199 one-time. Approximately 2.5 hours per module, totaling around 30 hours for full course completion..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours