A tailored course, built for your situation
Mastering CIS Controls for Hosting Operations Analysts
Build repeatable security configurations that scale across infrastructure units
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Security configurations that work in one region fail in another due to inconsistency
The situation this course is for
Without standardized baselines, infrastructure teams waste cycles reinventing controls, fail audits unnecessarily, and delay deployments waiting for security alignment.
Who this is for
Senior Hosting and Infrastructure Analysts responsible for secure, repeatable deployment patterns across regions
Who this is not for
Junior admins learning basics, executives seeking summaries, or auditors focused solely on compliance checklists
What you walk away with
- Deploy CIS-aligned configurations that pass audit without rework
- Standardize secure baselines across Windows, Linux, and cloud platforms
- Reduce misconfiguration incidents by 60% using automated validation templates
- Gain recognition as the go-to practitioner for cross-unit security consistency
- Influence infrastructure design choices before deployment cycles begin
The 12 modules (with all 144 chapters)
Module 1. Introduction to CIS Controls Framework
Understand the structure, scope, and governance model of the CIS Benchmarks. Learn how levels one and two apply to hosting environments and how they align with UK operational resilience expectations.
12 chapters in this module
- What CIS Controls Are
- Structure of CIS Benchmarks
- Level 1 vs Level 2 Controls
- Mapping to Hosting Infrastructure
- CIS vs NIST CSF Overview
- CIS and UK GDPR Alignment
- Role of Automation in Implementation
- Benchmark Update Cycle
- Vendor-Specific Benchmarks
- Cloud Configuration Baselines
- Operating System Coverage
- Industrial Control Systems Add-On
Module 2. CIS Control 1: Inventory and Control of Hardware Assets
Establish a reliable, automated hardware inventory tied to secure configuration baselines. Learn how to track unauthorized devices and enforce policy compliance across hybrid environments.
12 chapters in this module
- Hardware Asset Discovery Methods
- Automated Inventory Tools
- Device Ownership Tracking
- Unauthorized Device Detection
- Decommissioning Workflow
- Hardware Refresh Cycles
- Virtual Machine Tracking
- Cloud Instance Monitoring
- Agent-Based vs Agentless
- Integration with ServiceNow
- Alerting on New Devices
- Reporting to Leadership
Module 3. CIS Control 2: Inventory and Control of Software Assets
Implement software whitelisting and version control to reduce attack surface. Learn how to maintain an accurate, actionable software inventory across multiple hosting zones.
12 chapters in this module
- Software Discovery Techniques
- Approved Software List
- Unapproved Software Removal
- Version Lifecycle Tracking
- Patch Compatibility Checks
- Software Ownership Model
- Virtualized Application Monitoring
- Container Image Tracking
- License Compliance Integration
- Cloud-Native Binary Oversight
- Automated Reporting
- Integration with Jira
Module 4. CIS Control 3: Data Protection
Classify data at rest and enforce encryption standards across hosting environments. Learn how to map data flows and protect sensitive information per UK GDPR expectations.
12 chapters in this module
- Data Classification Framework
- Discovery of Sensitive Data
- Encryption Standards Mapping
- Database Encryption
- File Share Protection
- Cloud Storage Encryption
- Key Management Basics
- Data Loss Prevention Overview
- Access Control Integration
- Audit Logging Setup
- Breach Detection Signals
- Data Flow Diagramming
Module 5. CIS Control 4: Secure Configuration for Hardware and Software
Develop and deploy hardened configurations for operating systems and applications. Learn how to automate configuration validation across heterogeneous infrastructure.
12 chapters in this module
- Baseline Configuration Design
- CIS Benchmark Profiles
- Windows Hardening
- Linux Hardening
- Cloud Platform Settings
- Configuration Drift Detection
- Automated Remediation
- Group Policy Integration
- Change Management Sync
- Pre-Deployment Validation
- Post-Deployment Scanning
- Audit Readiness Checks
Module 6. CIS Control 5: Account Management
Enforce least privilege through consistent account provisioning and deactivation. Learn how to audit access rights and eliminate standing privileges in hosting environments.
12 chapters in this module
- User Role Definition
- Privileged Account Inventory
- Just-In-Time Access
- Service Account Management
- Password Policy Enforcement
- Multi-Factor Authentication
- Account Lockout Policies
- Remote Access Controls
- Shared Account Tracking
- Break-Glass Account Setup
- Access Review Cycles
- Integration with Azure AD
Module 7. CIS Control 6: Access Control Management
Implement role-based access controls across systems and applications. Learn how to align permissions with job functions and reduce lateral movement risk.
12 chapters in this module
- Role-Based Access Design
- Permission Review Process
- Access Request Workflow
- Segregation of Duties
- Emergency Access Controls
- Cloud IAM Policies
- File System Permissions
- Database Access Rights
- Application Access Levels
- Remote Worker Access
- Vendor Access Management
- Access Recertification
Module 8. CIS Control 7: Continuous Vulnerability Management
Establish a repeatable process for scanning, prioritizing, and remediating vulnerabilities. Learn how to integrate scanning tools into deployment pipelines.
12 chapters in this module
- Vulnerability Scanning Schedule
- CVSS Scoring Basics
- Patch Prioritization Framework
- Automated Patch Deployment
- Zero-Day Response
- Cloud Vulnerability Tools
- Third-Party Component Risks
- Software Bill of Materials
- Remediation SLA Setup
- Integration with Jira
- Reporting to Management
- Post-Remediation Validation
Module 9. CIS Control 8: Audit Log Management
Collect, protect, and analyze logs from critical systems. Learn how to detect anomalies and support investigations with reliable audit trails.
12 chapters in this module
- Log Source Identification
- Centralized Logging Setup
- Log Retention Policy
- SIEM Integration
- Event Correlation
- Anomaly Detection
- Log Integrity Protection
- Cloud Log Export
- User Activity Monitoring
- Security Alert Thresholds
- Incident Response Support
- Audit Readiness
Module 10. CIS Control 9: Email and Web Browser Protections
Harden email and web access points commonly exploited in attacks. Learn how to configure browser security and filter malicious content.
12 chapters in this module
- Browser Security Settings
- Phishing Protection
- Email Attachment Filtering
- URL Filtering
- Web Proxy Integration
- Content Disarm and Reconstruction
- Browser Extension Controls
- Pop-Up Blocker Setup
- HTTPS Enforcement
- DNS Filtering
- User Training Integration
- Reporting Suspicious Messages
Module 11. CIS Control 10: Malware Defenses
Deploy layered defenses against malware and ransomware. Learn how to configure endpoint protection and detect malicious behavior.
12 chapters in this module
- Antivirus Configuration
- Host-Based Firewall
- Behavioral Analysis
- Ransomware Protection
- Endpoint Detection and Response
- Threat Intelligence Feeds
- Malware Sandbox
- Zero-Trust Integration
- Quarantine Procedures
- Incident Escalation
- Backup Integration
- Recovery Testing
Module 12. Implementing CIS Across Business Units
Scale CIS adoption beyond a single team. Learn how to influence peers, secure leadership support, and maintain consistency across regions.
12 chapters in this module
- Change Management Strategy
- Stakeholder Engagement
- Pilot Deployment
- Feedback Collection
- Regional Adaptation
- Documentation Standards
- Training Rollout
- Executive Reporting
- Cross-Team Collaboration
- Lessons Learned
- Continuous Improvement
- Certification Preparation
How this maps to your situation
- When launching new hosting zones
- Before audit cycles begin
- After a security incident
- During cloud migration
Before vs. after
Before
Security configurations vary by region, leading to audit findings and rework.
After
Consistent, CIS-aligned baselines are deployed across all hosting units, reducing audit friction and increasing operational velocity.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters total)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-4 hours per module, designed to fit around operational demands.
If nothing changes
Without standardized baselines, teams will continue to resolve the same configuration issues repeatedly, increasing risk and delaying projects.
How this compares to the alternatives
Unlike generic security courses, this program delivers actionable, role-specific implementation playbooks grounded in CIS Controls and tailored to hosting operations in multi-region environments.
Frequently asked
Who is this course for?
Senior hosting and infrastructure analysts responsible for secure, repeatable deployment patterns across regions and business units.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does the course cover cloud environments?
Yes, every module includes specific guidance for AWS, Azure, and GCP configurations aligned with CIS Benchmarks.
$199 one-time. Approximately 3-4 hours per module, designed to fit around operational demands..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours