A tailored course, built for your situation
Mastering CIS Controls for HSSE Leadership in Energy Projects
Build unshakable command of cybersecurity hygiene in high-risk operational environments
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Frustration when security controls feel bolted-on instead of built-in
The situation this course is for
HSSE leaders often inherit cybersecurity requirements as afterthoughts, leading to rework, delays, and misalignment with operational priorities. Without a structured approach to embedding controls early, teams face reactive audits and fragmented compliance.
Who this is for
Senior HSSE and operational safety leaders in energy and resource projects who must integrate cybersecurity into project execution without slowing delivery
Who this is not for
Entry-level compliance staff, pure IT security specialists without project exposure, or consultants without hands-on field experience
What you walk away with
- Confidently map CIS Controls to HSSE milestones in gas and energy projects
- Anticipate audit findings before they arise through framework-backed planning
- Translate technical controls into operational checklists for field teams
- Own end-to-end control narratives from design to sign-off
- Produce reusable control implementation packs for future projects
The 12 modules (with all 144 chapters)
Module 1. Foundations of CIS Controls in Operational Environments
Introduce the 20 CIS Controls with emphasis on relevance to physical infrastructure and HSSE workflows. Focus on integrating control thinking early in project lifecycles.
12 chapters in this module
- What CIS Controls are and why they matter
- Mapping controls to project safety plans
- CIS vs NIST vs ISO: when to apply which
- The role of asset inventory in HSSE
- Automated discovery in field environments
- Secure configuration for OT systems
- Endpoint protection in remote sites
- Malware defenses for industrial systems
- Data protection across project phases
- Email and web browser hardening
- CIS Controls and contractor onboarding
- Control ownership models in matrix teams
Module 2. Control 1 to 6 Deep Dive
Detailed walkthrough of foundational controls with implementation blueprints for energy projects.
12 chapters in this module
- Implementing inventory management at scale
- Validating hardware and software registers
- Benchmarking secure configurations
- Using CIS Benchmarks for vendor selection
- Maintaining configuration integrity
- Patch cycles aligned with project windows
- Email client security settings
- Web browser baseline configurations
- Malware protection on field laptops
- Limiting admin privileges in OT networks
- Multi-factor authentication in low-connectivity areas
- CIS Controls for contractor access
Module 3. Control 7 to 10 Implementation
Focus on access control, network defenses, and logging in distributed project environments.
12 chapters in this module
- User access reviews for rotating crews
- Principle of least privilege in field ops
- Network segmentation for safety zones
- Firewall rule management in remote areas
- DNS protection for project sites
- NTP configuration and consistency
- Centralized logging for incident response
- Log review cadence for audits
- Encryption requirements for data at rest
- Encryption in transit for field reporting
- Multi-factor for project management portals
- Wireless network security in camps
Module 4. Control 11 to 13 in Practice
Threat defense and penetration testing strategies tailored to high-consequence environments.
12 chapters in this module
- Boundary protection for temporary sites
- Intrusion prevention system tuning
- Site-to-site VPN configurations
- Phishing simulation for remote teams
- Spam filtering in field email
- Endpoint detection for OT devices
- Penetration testing for project networks
- Red teaming exercise planning
- Vulnerability scanning cadence
- Automated scanning tools selection
- Patch prioritization in production
- Zero-day response planning
Module 5. Control 14 to 16 Integration
Security policies, data governance, and service provider oversight.
12 chapters in this module
- Writing security policies for contractors
- Acceptable use policy field enforcement
- Data classification in project phases
- Data retention schedules by jurisdiction
- Encryption key management
- Decommissioning data securely
- Vendor risk assessment process
- Pre-contract security reviews
- Third-party audit evidence collection
- Service provider control validation
- Contractual security clauses
- Post-contract reviews
Module 6. Control 17 to 20 Application
Incident response, penetration testing, and architectural planning.
12 chapters in this module
- Incident response plan structure
- Rapid containment in field ops
- Forensic data preservation
- Post-mortem process leadership
- Annual penetration test planning
- Scoping penetration tests for assets
- Secure network architecture design
- Network diagrams for auditors
- CIS Controls and IEC 62443 alignment
- Security champions in project teams
- Training delivery for non-technical staff
- Continuous control validation
Module 7. CIS Controls and HSSE Workflow Alignment
Integrate control timelines with HSSE deliverables and project gates.
12 chapters in this module
- Mapping controls to pre-commissioning
- Safety case integration points
- Documentation for environmental permits
- HSSE audit preparation
- Control evidence in HAZOP reviews
- Safety sign-off and cyber readiness
- Pre-startup reviews with IT
- Handover documentation for operations
- Training for site operators
- Checklist integration into PTW systems
- Inspection rounds with cyber elements
- Control tracking in project dashboards
Module 8. Audit-Ready Artefact Development
Produce evidence packs that pass internal and regulator-facing reviews.
12 chapters in this module
- Building the SOC 2 evidence folder
- CIS mapping to ISO 27001
- Narratives for control implementation
- Screenshots vs attestations
- Version-controlled control docs
- Standalone control packs
- Audit trail creation
- Evidence retention timelines
- Cross-reference index building
- Automated evidence collection
- Third-party validation requests
- Re-audit preparation
Module 9. Stakeholder Communication and Influence
Frame CIS Controls as enablers, not obstacles.
12 chapters in this module
- Presenting controls to project managers
- Cost-benefit messaging for leadership
- Control trade-offs in risk registers
- Incorporating feedback from field
- Reporting progress to executives
- Engaging contractors on compliance
- Building trust with OT teams
- Managing resistance to change
- Success metrics for control adoption
- KPIs for cyber-HSSE integration
- Lessons learned documentation
- Cross-project knowledge transfer
Module 10. Customization and Scaling
Adapt the framework for different project scales and geographies.
12 chapters in this module
- Scaling controls for small projects
- Regional compliance variations
- Language and localization needs
- Adapting for unionized environments
- Climate-specific challenges
- Remote site limitations
- Bandwidth-constrained control monitoring
- Offline logging solutions
- Paper-based fallbacks
- Hybrid digital-paper workflows
- Cross-border data flows
- Local regulator expectations
Module 11. Playbook Development
Create a living implementation guide tailored to your organization.
12 chapters in this module
- Template structure for playbooks
- Versioning strategy
- Ownership assignment
- Approval workflows
- Integration with document management
- Training new staff from the playbook
- Updating after audits
- Lessons learned incorporation
- Change control process
- Linking to project templates
- Digital access for field teams
- Printable summary sheets
Module 12. Sustaining Mastery and Leadership
Maintain and grow influence beyond initial implementation.
12 chapters in this module
- Mentorship of junior HSSE staff
- Internal control advocacy
- Presenting successes internally
- Contributing to global standards
- Peer review participation
- Benchmarking against peers
- Continuous learning paths
- Certification alignment
- Speaking at internal forums
- Publishing internal best practices
- Advising on M&A security integration
- Leading cross-functional working groups
How this maps to your situation
- Project startup with new contractor teams
- Pre-commissioning security review
- Regulator-facing audit preparation
- Post-project handover to operations
Before vs. after
Before
CIS Controls are treated as IT tasks, leading to last-minute scrambles during audits and misalignment with HSSE timelines.
After
Security controls are embedded into project workflows from day one, with reusable artefacts and stakeholder trust built through consistency.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters total)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per module, designed for completion over 8-12 weeks with real-world application between modules.
If nothing changes
Continuing without a structured approach to CIS Controls means repeated rework, strained stakeholder relationships, and increased exposure during project audits.
How this compares to the alternatives
Unlike generic cybersecurity courses, this program is tailored to HSSE leaders in energy projects, focusing on practical integration over theoretical knowledge. No other course maps CIS Controls directly to safety workflows and contractor management in resource sectors.
Frequently asked
Is this course technical or managerial?
It's designed for technical managers, HSSE leads who need operational depth without becoming IT specialists.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Can I use this for team training?
The course is licensed per individual, but the implementation playbook can be shared and adapted for team use.
$199 one-time. Approximately 3 hours per module, designed for completion over 8-12 weeks with real-world application between modules..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours