Duration
5 days (40 hours)
Course Overview
This course builds knowledge and skills required to successfully architect, design, implement, monitor, and maintain information storage security solutions to meet the needs of a business.
It details a comprehensive, holistic, process-based approach that integrates business and technical factors to consider in the design of information storage security solutions to enhance their acceptability and business value.
The course encompasses business strategy and its key criteria and perspectives, regulatory compliance, technical criteria, best practices, organizational structure, processes, people skills, and security posture.
Included is a discussion of information security challenges and solutions in virtualized and cloud environments.
Workshop style case studies at each design stage provide participants with an opportunity to apply their learning to real world situations.
Audience
This course is intended for:
- Experienced IT professionals who are responsible for architecting secure information storage solutions
- IT professionals who have foundational knowledge on storage technologies and want to build their career in the storage industry
- Individuals who are seeking the EMC Proven Professional Data Center Architect (EMCDCA) Information Storage Security Specialist Certification
- Experienced security professionals with a basic knowledge of storage technologies (such as SAN and NAS) may also derive benefits.
Prerequisite Knowledge/Skills
To understand the content and successfully complete this course, the student must have:
- An EMC Information Storage Associate (EMCISA) Certification
- A combination of knowledge and experience in computer networking and security that is equivalent to CompTIA’s Network+ and Security+ curricula.
Course Objectives
Upon successful completion of this course, participants should be able to:
Identify various regulations, legislation and standards that affect a customer’s information infrastructure and the customer’s security issues
Explain the role of an enterprise security policy and the critical components of that policy.
Describe the importance of a security development lifecycle on the creation of secure products and the effect on operational security
Explain how Security Configuration guides can be used to understand an organization’s security problems
Articulate the critical design decisions that support a secure storage environment
List various implementation strategies for securely integrating storage products into a storage ecosystem.
Explain the role of information storage security within virtualized environments
Articulate how to maximize information storage security in Cloud computing
Describe the role of secure logging in security auditing and SIEM
Define vulnerability management and the process of reporting weaknesses
List the key areas of data loss prevention
List common characteristics of digital forensics when working with storage subsystems
And thereby be able to hold credible conversations with other security personnel concerning storage products and technology
All of these topics will be illustrated by EMC products, practices and services.
Course Modules
Modules are designed to support the course objectives. The following modules are included in this course:
Section 1: Building a Business Strategy for Storage Security
Establishes the business justification for storage security as a separate area of focus, explains how enterprise security policies must reflect the regulatory and legislative requirements, and details how various governance frameworks serve to support the ongoing design of secure storage solutions, coupled with the creation of specific storage security policies.
Section 3: Designing for Secure Solutions
Covers the design and implementation process for providing secured storage solutions and discusses the particular requirements for securing storage in virtualized and cloud environments.
Module 15 – Wrap-Up
Case Studies
Case studies reinforce the information that a student has been taught. In the case studies for this course, participants will work in teams on different technical cases set in different industries with different security challenges. Each case has the following phases.
Phase 0: Identifying an organization’s critical information and infrastructure
Phase 1: Evaluating the security posture of the organization
Phase 2: Mapping security feature/functions to data storage security best practices and the organization’s security policy
Phase 3: Responding to an organization’s security concerns after installation
Assessment
Assessments validate that you have learned the knowledge or skills presented during a learning experience. This course includes an assessment upon conclusion.
This is a version-specific reference outline. Confirm the current syllabus and delivery arrangements with EIEIO.