Proving that Aldergrove Partners' endpoint hardening baseline is really enforced across 60,000 Windows, macOS and Linux endpoints in 40 countries, after an audit found the CIS baseline 40% not effective and 1,840 exceptions had never been added up: a horizontal hardening funnel of eight stages from baseline selection, segmentation and baseline as code through control challenge, drift, compatibility and attestation to optimisation; and a control-challenge board where an ASR rule moves from audit to block and stops a benign test action, developer local admin becomes a priced and expiring exception, GPO and Intune conflicts get one channel, and silent setting changes raise drift alerts — ending in an attestation insurers accept.

CY-EXPERT-021Expert Level · Endpoint Security

Endpoint Hardening Baseline Challenge — The Hardening Funnel

An expert-level course that goes beyond applying a hardening baseline on one platform or architecting endpoint security, to proving - per setting, per fleet - that a hardening baseline is actually enforced and effective, tailoring by real threat, proving each setting bites with an authorized test, catching drift and tamper, engineering around breaking changes, and attesting with real evidence across Aldergrove Partners' 60,000-endpoint fleet.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Choose and threat-tailor a hardening baseline, mapped to NIST 800-53/800-171 and CIS Controls v8, with every deviation documented.
Segment a fleet into persona-based baselines and run an exception lifecycle that prices and expires every deviation.
Prove each control actually bites with an authorized effect test, and catch drift, tamper, and update regressions continuously.
Build evidence-backed, compliance-by-setting attestations for insurers, customers, and regulators, and run a continuously optimised program.

Price:৳12,000