SEC566 provides a practical guide to implementing and auditing the Center for Internet Security (CIS) Critical Security Controls (CIS Controls). This course is designed to help organizations improve their cybersecurity posture by effectively prioritizing and deploying the CIS Controls framework. Participants will learn how to assess current security practices, identify gaps, and align them with CIS guidelines to reduce risk. The course also covers techniques for auditing the implementation of controls to ensure compliance and effectiveness. Through hands-on exercises and real-world scenarios, SEC566 equips security professionals with actionable strategies to strengthen defenses and achieve measurable improvements in cybersecurity.
- Introduction and Overview of the CIS Critical Controls
- Data Protection, Identity and Authentication, Access Control Management, Audit Log Management
- Server, Workstation, Network Device Protections (Part 1)
- Server, Workstation, Network Device Protections (Part 2)
- Governance and Operational Security
