Course Outline
Module 1. Cloud Architecture
This module establishes the foundations of cloud computing, exploring definitions, structural frameworks, and the pivotal role of virtualization. It examines service models, delivery mechanisms, and core characteristics, while introducing the Shared Responsibilities Model and a structured approach to cloud security.
Key Topics:
- Unit 1 - Introduction to Cloud Computing
- Unit 2 - Introduction & Cloud Architecture
- Unit 3 - Cloud Essential Characteristics
- Unit 4 - Cloud Service Models
- Unit 5 - Cloud Deployment Models
- Unit 6 - Shared Responsibilities
Module 2. Infrastructure Security for Cloud
This section investigates the robust protection of core cloud infrastructure, covering components, networking, management interfaces, and credential management. It also addresses virtual networking and workload security, including the fundamentals of containers and serverless architectures.
Key Topics:
- Unit 1 - Module Intro
- Unit 2 - Intro to Infrastructure Security for Cloud Computing
- Unit 3 - Software Defined Networks
- Unit 4 - Cloud Network Security
- Unit 5 - Securing Compute Workloads
- Unit 6 - Management Plane Security
- Unit 7 - BCDR
Module 3. Managing Cloud Security and Risk
Focuses on critical strategies for overseeing cloud security. The module initiates with risk assessment and governance, proceeds to legal and compliance matters such as cloud discovery requirements, and highlights essential CSA risk assessment tools, including CAIQ, CCM, and the STAR registry.
Key Topics:
- Unit 1 - Module Introduction
- Unit 2 - Governance
- Unit 3 - Managing Cloud Security Risk
- Unit 4 - Legal
- Unit 5 - Legal Issues In Cloud
- Unit 6 - Compliance
- Unit 7 - Audit
- Unit 8 - CSA Tools
Module 4. Data Security for Cloud Computing
Addresses information lifecycle management within the cloud, emphasizing the application of security controls in public cloud environments. Subjects include the Data Security Lifecycle, storage models, security challenges across delivery models, and encryption management, including Bring Your Own Key (BYOK) strategies.
Key Topics:
- Unit 1 - Module Introduction
- Unit 2 - Cloud Data Storage
- Unit 3 - Securing Data In The Cloud
- Unit 4 - Encryption For IaaS
- Unit 5 - Encryption For PaaS & SaaS
- Unit 6 - Encryption Key Management
- Unit 7 - Other Data Security Options
- Unit 8 - Data Security Lifecycle
Module 5. Application Security and Identity Management for Cloud Computing
Explores identity management and application security tailored for cloud environments. Topics encompass federated identity, various IAM implementations, secure development practices, and the management of application security within and for the cloud.
Key Topics:
- Unit 1 - Module Introduction
- Unit 2 - Secure Software Development Life Cycle (SSDLC)
- Unit 3 - Testing & Assessment
- Unit 4 - DevOps
- Unit 5 - Secure Operations
- Unit 6 - Identity & Access Management Definitions
- Unit 7 - IAM Standards
- Unit 8 - IAM In Practice
Module 6. Cloud Security Operations
Examines critical factors in evaluating and selecting cloud providers, as well as managing their services. It also discusses the role of Security as a Service (SECaaS) providers and the implications of cloud environments on Incident Response.
Key Topics:
- Unit 1 - Module Introduction
- Unit 2 - Selecting A Cloud Provider
- Unit 3 - SECaaS Fundamentals
- Unit 4 - SECaaS Categories
- Unit 5 - Incident Response
- Unit 6 - Domain 14 Considerations
- Unit 7 - CCSK Exam Preparation
Additional material
Core Account Security
Participants learn essential configurations for new cloud accounts, focusing on enabling foundational security controls such as MFA, basic monitoring, and IAM settings within the initial minutes of account setup.
IAM and Monitoring In-Depth
Building on previous labs, attendees implement more sophisticated identity management and monitoring solutions. This involves expanding IAM with Attribute Based Access Controls, configuring security alerting, and structuring enterprise-scale IAM and monitoring systems.
Network and Instance Security
Participants construct a virtual network (VPC) and apply baseline security settings. They also practice securely selecting and launching virtual machines (instances), conducting vulnerability assessments in the cloud, and establishing secure connections.
Encryption and Storage Security
Extending their deployment, participants add storage volumes encrypted with customer-managed keys and learn methods for securing snapshots and other data assets.
Application Security and Federation
Concluding the technical labs, participants build a complete two-tier application and implement federated identity authentication using OpenID.
Risk and Provider Assessment
Participants utilize the CSA Cloud Controls Matrix and STAR registry to assess risk and select appropriate cloud providers.
Testimonials (1)
A wide range of knowledge of the lecturer.
