Duration
4 days
Course Description
This course is the most comprehensive review of cloud security concepts and industry best practices covering the six domains of the (ISC)2 Common Body of Knowledge (CBK®). You will gain knowledge in identifying the types of controls necessary to administer various levels of confidentiality, integrity, and availability, with regard to securing data in the cloud. You will identify the virtual and physical components of the cloud infrastructure with regard to risk management analysis, including tools and techniques necessary for maintaining a secure cloud infrastructure. You will gain an understanding in cloud software assurance and validation, utilizing secure software, and the controls necessary for developing secure cloud environments. You will identify privacy issues and audit processes utilized within a cloud environment, including auditing controls, assurance issues, and the specific reporting attributes.
Course Objectives
In-depth coverage of the six domains required to pass the CCSP exam:
- Architectural concepts and design requirements
- Cloud data security
- Cloud platform and infrastructure security
- Cloud application security
- Operations
- Legal and compliance
Prerequisites
- Experienced information security professionals with at least five years of IT experience, including three years of information security and at least one year of cloud security experience.
- CISSP Certification Prep Course
DAY 1
11:00am - 12:30pm
- Architecture Concepts and Design Requirements
- Cloud Computing Concepts
12:30pm - 12:45pm Noon Break
12:45pm - 2:30pm
- Cloud Reference Architecture
- Security Concepts Relevant to Cloud Computing
2:30pm - 3:30pm Lunch Break
3:30pm - 5:30pm
- Design Principles of Secure Cloud Computing
5:30pm - 5:45pm Evening Break
5:45pm - 7:00pm
- Trusted Cloud Services
- Exercises
DAY 2
11:00am - 12:30pm
- Cloud Data Security
- Cloud Data Lifecycle
- Design and Implement Cloud Data Storage Architectures
- Design and Apply Data Security Strategies
12:30pm - 12:45pm Noon Break
12:45pm - 2:30pm
- Implement Data Discovery and Classification Technologies
- Design and Implement Data Rights Management
- Design and Implement Relevant Jurisdictional Data Protections for Personally Identifiable Information (PIN)
2:30pm - 3:30pm Lunch Break
3:30pm - 5:30pm
- Plan and Implement Data Retention, Deletion, and Archiving Policies
- Design and Implement Auditability, Traceability, and Accountability of Data Events
5:30pm - 5:45pm Evening Break
5:45pm - 7:00pm
- Cloud Platform and Infrastructure Security
- Cloud Infrastructure Components
- Risks Associated to Cloud Infrastructure
- Design and Plan Security Controls
- Plan Disaster Recovery and Business Continuity Management
DAY 311:00am - 12:30pm
- Cloud Application Security
- Need for Training and Awareness in Application Security
12:30pm - 12:45pm Noon Break
12:45pm - 2:30pm
- Cloud Software Assurance and Validation
- Use Verified Secure Software
2:30pm - 3:30pm Lunch Break
3:30pm - 5:30pm
- Software Development Life-Cycle (SDLC) Process
- Apply the Software Development Life-Cycle
- Specifics of Cloud Application Architecture
- Design Appropriate Identity and Access Management (IAM) Solutions
5:30pm - 5:45pm Evening Break
5:45pm - 7:00pm
- Operations
- Support the Planning Process for the Data Center Design
- Implement and Build Physical Infrastructure for Cloud Environment
- Run Physical Infrastructure for Cloud Environment
DAY 411:00am - 12:30pm
- Manage Physical Infrastructure for Cloud Environment
- Build Logical Infrastructure for Cloud Environment
- Run Logical Infrastructure for Cloud Environment
- Manage Logical Infrastructure for Cloud Environment
12:30pm - 12:45pm Noon Break
12:45pm - 2:30pm
- Ensure Compliance with Regulations and Controls (ITIL, ISO/IEC 20000-I)
- Conduct Risk Assessment to Logical and Physical Infrastructure
- Collection, Acquisition, and Preservation of Digital Evidence
- Manage Communication with Relevant Parties
2:30pm - 3:30pm Lunch Break
3:30pm - 5:30pm
- Legal and Compliance
- Legal Requirements and Unique Risks within the Cloud Environment
- Privacy Issues, Including Jurisdictional Variation
- Audit Process, Methodologies, and Required Adaptions for a Cloud Environment
5:30pm - 5:45pm Evening Break
5:45pm - 7:00pm
- Implications of Cloud to Enterprise Risk Management
- Outsourcing and Cloud Contract Design
- Execute Vendor Management
Programme scope, delivery arrangements and suitability are confirmed during enquiry.