TOPICS

Course Outline
1. Architecture Concepts and Design Requirements  Cloud Computing Concepts Cloud Reference Architecture Security Concepts Relevant to Cloud Computing  Design Principles of Secure Cloud Computing  Trusted Cloud Services
2. Cloud Data Security Cloud Data Lifecycle Design and Implement Cloud Data Storage Architectures Design and Apply Data Security Strategies and Implement Data Discovery and Classification Technologies  Design and Implement Data Rights Management Design and Implement Relevant Jurisdictional Data Protections for Personally Identifiable Information (PIN)
Plan and Implement Data Retention, Deletion, and Archiving Policies  Design and Implement Auditability, Traceability, and Accountability of Data Events
3. Cloud Platform and Infrastructure Security  Cloud Infrastructure Components Risks Associated to Cloud Infrastructure
Design and Plan Security Controls  Plan Disaster Recovery and Business Continuity Management
4. Cloud Application Security  Need for Training and Awareness in Application Security Cloud Software Assurance and Validation Use Verified Secure Software Software Development Life-Cycle (SDLC) Process Apply the Software Development Life-Cycle Specifics of Cloud Application Architecture Design Appropriate Identity and Access Management (IAM) Solutions
5. Operations  Support the Planning Process for the Data Center Design Implement and Build Physical Infrastructure for Cloud Environment  Run Physical Infrastructure for Cloud Environment Manage Physical Infrastructure for Cloud Environment  Build Logical Infrastructure for Cloud Environment Run Logical Infrastructure for Cloud Environment Manage Logical Infrastructure for Cloud Environment  Ensure Compliance with Regulations and Controls (ITIL, ISO/IEC 20000-I)  Conduct Risk Assessment to Logical and Physical Infrastructure  Collection, Acquisition, and Preservation of Digital Evidence
Manage Communication with Relevant Parties
6. Legal and Compliance Legal Requirements and Unique Risks within the Cloud Environment  Privacy Issues, Including Jurisdictional Variation Audit Process, Methodologies, and Required Adaptions for a Cloud Environment Implications of Cloud to Enterprise Risk Management  Outsourcing and Cloud Contract Design Execute Vendor Management