SEC366: OnDemand

What You Will Learn

The prioritization of CIS IG1 is particularly useful to small and mid-size organizations who lack full blown cybersecurity teams yet need basic protections in place. IG1 is the on-ramp to the CIS Controls and consists of a foundational set of 56 cyber defense Safeguards. The Safeguards included in IG1 are what every enterprise should apply to defend against the most common attacks.

IG1 is designed to protect low level sensitive data that principally surrounds employee and financial information. Safeguards selected for IG1 should be implementable with limited cybersecurity expertise and aimed to thwart general, non-targeted attacks. These Safeguards will also typically be designed to work in conjunction with small or home office commercial off-the-shelf (COTS) hardware and software.

This targeted, hands-on training on CIS Controls Implementation Group 1 (IG1) teaches security practitioners not only how to defend against threats but also the reasoning behind these measures and how to future-proof defenses against emerging threats. SEC366 demonstrates how to implement the CIS Controls through cost-effective automation, making it an essential course for to measure and improve the effectiveness of cybersecurity controls in all organizations.
What is CIS Implementation Group 1?

CIS Implementation Group 1 is the most basic set of essential cyber hygiene controls that represent a minimum standard of information security necessary for every organization.
Business Takeaways

• Efficiently reduce the most important cyber-related risks
• Align compliance requirements with security and business goals and solutions
• Report the status of cybersecurity defense efforts to senior leadership in clear, business terms

Skills Learned

• Apply initial security controls based on actual threats that are measurable, scalable, and reliable in stopping known attacks and protecting your organization's important information and systems
• Understand the importance of each CIS IG1 control and how it is compromised if ignored
• Explain the defensive goals that result in quick wins and increased visibility of network and systems
• Identify and use tools that implement controls through automation

Hands-On CIS Implementation Group 1 Training

During this course, students will participate in hands-on lab exercises that illustrate the concepts discussed in class. The goal of these labs is to complement and enhance the understanding of the defenses discussed in the course and to provide practical examples of how CIS IG1 can be applied in a practical, real-world scenario.
Additional Free Resources

• CIS Critical Security Controls
• CIS Implementation Groups
• CIS Implementation Group 1
• CIS Controls V8 downloadable poster
• Managing Information Security Risk with CIS Controls, webcast

What You Will Receive

• Electronic courseware
• Mp3 audio files of course lecture
• Course VM to practice concepts

What Comes Next?

• SEC566: Implementing and Auditing CIS Controls