Wrenfield Water's control improvement programme: the register said all 250 key controls were in place, but three incidents found MFA with 1,018 accounts excluded, EDR in detect-only mode on 2,040 endpoints and backup vaults without a retention lock; the twenty-five-cell control effectiveness meter, each cell ten key controls, climbs from 34% tested effective past the Board's 80% target to 90%; and every control family moves above the 80% tick as overdue improvement actions fall from 88 to 4.

CY-PRO-036Pro Level · Blue Teaming

Control Effectiveness Improvement Program

A forty-hour Pro-level control-improvement simulation run on a live control improvement command board, where you are Head of Defensive Operations at a regulated water utility; three incidents in a year each find a control the register called ‘in place’ that did not work, post-mortem actions pile up unclosed — and you replace attestation with tests, learn from every incident and near miss, rank improvement by risk reduced, prove it by re-test, drill and exercise, close only on verified evidence and defend the programme to the Board.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

Measure control effectiveness honestly — design and operation, in cycle, on reconciled populations with benign, pre-agreed tests — and publish a baseline that survives audit.
Learn from incidents and near misses without blame, map failures to controls, and rank improvements by the expected loss they remove within real capacity.
Improve identity, endpoint, email, detection and recovery controls where they failed, and prove each improvement by independent re-test, drill and exercise.
Close actions only on verified evidence, price the next phase at the margin, set KRIs and residuals the Board can own, and win a resolution everyone can be held to.

Price:৳15,000