Course Outline
Introduction to ISO 27017
- Overview of ISO/IEC 27017
- Connections to ISO 27001 and ISO 27002
- The significance of cloud security governance
Cloud Security Risks and Threats
- Typical security risks within cloud environments
- Vectors for cloud-based attacks
- Methodologies for assessing risk in cloud services
Key Information Security Controls in ISO 27017
- Additional controls specific to cloud contexts
- Shared security duties between CSPs and customers
- Data protection and encryption strategies in the cloud
Implementing Cloud Security Policies
- Establishing security policies for cloud adoption
- Managing access control and identity
- Handling security incidents in cloud settings
Compliance and Regulatory Considerations
- Legal and regulatory impacts of cloud security
- Mapping ISO 27017 to GDPR, HIPAA, and other regulations
- Audits and certification processes for cloud compliance
Best Practices for Cloud Security
- Monitoring security and detecting threats
- Driving continuous improvement in cloud security
- Safeguarding resilience and disaster recovery
Hands-On Implementation and Case Studies
- Applying ISO 27017 controls in real-world scenarios
- Analyzing cloud security case studies
- Interactive exercises focused on cloud security strategy
Summary and Next Steps
Requirements
- Foundational understanding of cloud computing
- Awareness of general information security principles
- Familiarity with ISO 27001 or other cybersecurity frameworks
Audience
- Cloud security specialists
- IT security managers
- Compliance officers
- Cloud service providers
Testimonials (4)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
Erica DeRosa DeRosa - Aecon Group INc.
Course - ISO 37001 Anti-Bribery Management System
I enjoyed the quizzes, and Driton's style of teaching.
Chloe - SEEC MM Ltd.,
Course - ISO 9001 Lead Implementer
With both my 2022 ISO 9001 audit prep-related training & the recently completed ISO 9001 audit prep refresher course; Dereck has helped me significantly with regards to gaining a new & practical perspective of the ISO 9001:2015 clauses & sections & how they apply to our business. Dereck has also helped me with both training courses --- to improve my ISO-related communications both with our company's employees and the external ISO Auditors .
