-
Architectural Concepts & Design Requirements 5
Cloud computing concepts & definitions based on the ISO/IEC 17788 standard; security concepts and principles relevant to secure cloud computing.
-
Understand Cloud Computing ConceptsLecture1.1
-
Describe Cloud Reference ArchitectureLecture1.2
-
Understand Security Concepts Relevant to Cloud ComputingLecture1.3
-
Understand Design Principles of Secure Cloud ComputingLecture1.4
-
Identify Trusted Cloud ServicesLecture1.5
-
-
Cloud Data Security 8
Concepts, principles, structures, and standards used to design, implement,monitor, and secure, operating systems, equipment, networks, applications, and those controls used to enforce various levels of confidentiality, integrity, and availability in cloud environments.
-
Understand Cloud Data LifecycleLecture2.1
-
Design and Implement Cloud Data Storage ArchitecturesLecture2.2
-
Design and Apply Data Security StrategiesLecture2.3
-
Understand and Implement Data Discovery and Classification TechnologiesLecture2.4
-
Design and Implement Relevant Jurisdictional Data Protections for Personally Identifiable Information (PII)Lecture2.5
-
Design and Implement Data Rights ManagementLecture2.6
-
Plan and Implement Data Retention, Deletion, and Archiving PoliciesLecture2.7
-
Design and Implement Auditability, Traceability and Accountability of Data EventsLecture2.8
-
-
Cloud Platform & Infrastructure Security 4
Knowledge of the cloud infrastructure components,both the physical and virtual, existing threats, and mitigating and developing plans to deal with those threats.
-
Comprehend Cloud Infrastructure ComponentsLecture3.1
-
Analyze Risks Associated to Cloud InfrastructureLecture3.2
-
Design and Plan Security ControlsLecture3.3
-
Plan Disaster Recovery and Business Continuity ManagementLecture3.4
-
-
Cloud Application Security 7
Processes involved with cloud software assurance and validation; and the use of verified secure software.
-
Recognize the need for Training and Awareness in Application SecurityLecture4.1
-
Understand Cloud Software Assurance and ValidationLecture4.2
-
Use Verified Secure SoftwareLecture4.3
-
Comprehend the Software Development Life-Cycle (SDLC) ProcessLecture4.4
-
Apply the Secure Software Development Life-CycleLecture4.5
-
Comprehend the Specifics of Cloud Application ArchitectureLecture4.6
-
Design Appropriate Identity and Access Management (IAM) SolutionsLecture4.7
-
-
Operations 11
Identifying critical information and the execution of selected measures that eliminate or reduce adversary exploitation of it; requirements of cloud architecture to running and managing that infrastructure; definition of controls over hardware, media, and the operators with access privileges as well as the auditing and monitoring are the mechanisms, tools and facilities.
-
Support the Planning Process for the Data Center DesignLecture5.1
-
Implement and Build Physical Infrastructure for Cloud EnvironmentLecture5.2
-
Run Physical Infrastructure for Cloud EnvironmentLecture5.3
-
Manage Physical Infrastructure for Cloud EnvironmentLecture5.4
-
Build Logical Infrastructure for Cloud EnvironmentLecture5.5
-
Run Logical Infrastructure for Cloud EnvironmentLecture5.6
-
Manage Logical Infrastructure for Cloud EnvironmentLecture5.7
-
Ensure Compliance with Regulations and Controls (e.g., ITIL, ISO/IEC 20000-1)Lecture5.8
-
Conduct Risk Assessment to Logical and Physical InfrastructureLecture5.9
-
Understand the Collection, Acquisition and Preservation of Digital EvidenceLecture5.10
-
Manage Communication with Relevant PartiesLecture5.11
-
-
Legal & Compliance 6
Addresses ethical behavior and compliance with regulatory frameworks. Includes investigative measures and techniques, gathering evidence (e.g., Legal Controls, eDiscovery, and Forensics); privacy issues and audit process and methodologies; implications of cloud environments in relation to enterprise risk management.
-
Understand Legal Requirements and Unique Risks within the Cloud EnvironmentLecture6.1
-
Understand Privacy Issues, Including Jurisdictional VariationLecture6.2
-
Understand Audit Process, Methodologies, and Required Adaption’s for a Cloud EnvironmentLecture6.3
-
Understand Implications of Cloud to Enterprise Risk ManagementLecture6.4
-
Understand Outsourcing and Cloud Contract DesignLecture6.5
-
Execute Vendor ManagementLecture6.6
-
