A tailored course, built for your situation
Mastering CIS Controls for General Managers in Commercial Real Estate
Become the recognized authority on cybersecurity best practices within your organization
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior operational leader in commercial real estate with cross-domain oversight and growing responsibility for vendor risk, cybersecurity posture, and internal stakeholder alignment.
Who this is not for
Entry-level IT staff, dedicated information security analysts, or consultants outside commercial real estate operations.
What you walk away with
- Lead cross-functional discussions using a standardized cybersecurity framework (CIS Controls) others respect and follow
- Produce documented risk assessments that align facilities, IT, and compliance teams without rework
- Respond to vendor security questionnaires with confidence and consistency
- Anticipate auditor requests by embedding control mapping into routine asset management
- Establish repeatable review rhythms that reduce last-minute scramble before compliance cycles
The 12 modules (with all 144 chapters)
Module 1. Understanding CIS Controls in Real Estate Contexts
An introduction to the 20 CIS Controls with emphasis on applicability to property operations, tenant services, and asset management teams. Focuses on translating technical controls into operational actions.
12 chapters in this module
- What CIS Controls are
- Why they matter in CRE
- Control family overview
- Mapping to physical assets
- Vendor risk linkage
- Regulatory alignment
- CRE-specific risks
- Control prioritization
- Integration with FM teams
- Documentation standards
- Audit readiness link
- Real-world examples
Module 2. Asset Inventory and Device Management
Establish a reliable foundation for security by maintaining accurate, up-to-date records of all hardware and software across portfolios, including IoT devices and building systems.
12 chapters in this module
- Hardware inventory methods
- Software tracking tools
- IoT device classification
- Device ownership assignment
- Lifecycle tracking
- Patch status monitoring
- Remote asset visibility
- Lease-end reconciliation
- Automated discovery
- Integration with CMDB
- Rental space audits
- Monthly review process
Module 3. Vendor Risk and Third-Party Oversight
Apply CIS Controls to manage security across service providers, contractors, and technology vendors, ensuring alignment with organizational risk posture.
12 chapters in this module
- Vendor onboarding checklist
- Security questionnaire design
- Tiered vendor classification
- Contractual control clauses
- Ongoing monitoring
- Insurance review process
- Incident response coordination
- Access revocation timing
- SLA security metrics
- Subcontractor oversight
- Due diligence cadence
- Exit reviews
Module 4. Secure Configuration for Network Devices
Ensure all network infrastructure components meet hardened baselines, reducing attack surface across buildings and remote offices.
12 chapters in this module
- Router configuration baseline
- Switch security settings
- Firewall rule hygiene
- Default credential removal
- Remote access controls
- Network segmentation
- Change approval process
- Firmware update schedule
- Encryption standards
- Monitoring setup
- Vulnerability scanning
- Compliance checking
Module 5. Continuous Vulnerability Management
Implement a predictable rhythm for identifying, prioritizing, and remediating security weaknesses across systems and assets.
12 chapters in this module
- Scan scheduling
- Asset coverage scope
- Risk scoring method
- Criticality tiers
- Remediation SLAs
- Patch deployment workflow
- False positive handling
- Reporting to leadership
- Integration with ticketing
- Monthly review meeting
- Escalation paths
- Success metrics
Module 6. Account Access Control and MFA Enforcement
Strengthen identity management across employees, vendors, and systems by enforcing least privilege and multi-factor authentication.
12 chapters in this module
- Role-based access design
- Privileged account tracking
- MFA rollout strategy
- Password policy enforcement
- Session timeout rules
- Access review frequency
- Vendor access limits
- Remote worker setup
- Emergency bypass process
- Audit logging
- Break-glass accounts
- Quarterly cleanup
Module 7. Audit Log Management and Review
Collect, protect, and analyze logs from key systems to support investigations and compliance demonstrations.
12 chapters in this module
- Log sources inventory
- Retention policy setup
- Centralized collection
- Encryption in transit
- Access controls
- Review frequency
- Anomaly detection
- Incident correlation
- Retention period
- Legal hold process
- Storage compliance
- Quarterly audit prep
Module 8. Email and Web Browser Protections
Reduce phishing and web-based threats by applying CIS-recommended configurations and training to widely used endpoints.
12 chapters in this module
- Email filtering setup
- URL rewriting
- Phishing simulation
- Browser hardening
- Extension policy
- User training rhythm
- Click reporting
- Quarantine review
- Spam threshold tuning
- Mobile email config
- Domain monitoring
- DMARC implementation
Module 9. Malware Defense and Endpoint Protection
Deploy and maintain effective protections across all devices accessing corporate and building systems.
12 chapters in this module
- Antivirus selection
- EDR integration
- Real-time scanning
- Automatic updates
- Quarantine workflow
- Threat intelligence feed
- Incident response steps
- Device isolation
- User alerting
- Monthly report review
- False positive tracking
- Policy exception process
Module 10. Data Protection and Encryption
Ensure sensitive data is identified, classified, and protected in storage and transit across locations and teams.
12 chapters in this module
- Data discovery tools
- Classification schema
- Encryption standards
- At-rest protection
- In-transit encryption
- Cloud storage settings
- Removable media policy
- DLP rules
- Legal requirements
- Tenant data handling
- Breach notification plan
- Annual review
Module 11. Incident Response Planning
Prepare for security events with clear roles, communication plans, and evidence preservation steps tailored to real estate operations.
12 chapters in this module
- Incident types classification
- Response team roles
- Communication tree
- Evidence preservation
- Forensic access
- Legal coordination
- Tenant notification
- Regulator reporting
- Post-incident review
- Tabletop exercises
- Plan update cycle
- Insurance claims
Module 12. Security Awareness and Culture Building
Foster a culture of security awareness across non-technical teams and frontline staff through consistent messaging and engagement.
12 chapters in this module
- Training frequency
- Content localization
- Leadership involvement
- Posters and signage
- Recognition programs
- Phishing metrics
- Feedback collection
- Language accessibility
- New hire onboarding
- Tenant communications
- Monthly themes
- Yearly campaign
How this maps to your situation
- When onboarding a new property management vendor
- Preparing for annual SOC 2 or ISO audit
- Responding to a phishing attempt across offices
- Rolling out new building automation systems
Before vs. after
Before
Security discussions are fragmented, requiring repeated context-setting across teams, and reliance on ad hoc vendor responses.
After
You lead from a position of recognized expertise, with standardized references and documented processes others follow.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion within 12 weeks with real-world application at each stage.
If nothing changes
Without a structured framework, security efforts remain reactive and siloed, increasing exposure and reducing leadership trust in operational resilience.
How this compares to the alternatives
Unlike generic cybersecurity courses, this focuses on the unique operational context of commercial real estate, linking CIS Controls directly to facilities, vendor management, and asset oversight.
Frequently asked
Is this course technical?
No. It's designed for operational leaders who need to understand and apply cybersecurity principles without being IT specialists.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me with audits?
Yes. You'll build documented, repeatable processes that auditors recognize and accept.
$199 one-time. Approximately 3 hours per module, designed for completion within 12 weeks with real-world application at each stage..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours