Course Outline

Domain 1 - Cloud Concepts, Architecture, and Design

• Understand Cloud Computing Concepts
• Describe Cloud Reference Architecture
• Understand Security Concepts Relevant to Cloud Computing
• Understand the Design Principles of Secure Cloud Computing
• Evaluate Cloud Service Providers

Domain 2 - Cloud Data Security

• Understand Cloud Data Lifecycle
• Design and Implement Cloud Data Storage Architectures
• Design and Apply Data Security Strategies
• Understand and Implement Data Discovery and Classification Technologies
• Design and Implement Relevant Jurisdictional Data Protections for Personally Identifiable Information
• Design and Implement Data Rights Management
• Plan and Implement Data Retention, Deletion, and Archiving Policies
• Design and Implement Auditability, Traceability and Accountability of Data Events

Domain 3 - Cloud Platform and Infrastructure Security

• Comprehend Cloud Infrastructure Components
• Analyse Risks Associated to Cloud Infrastructure
• Design and Plan Security Controls
• Plan Disaster Recovery and Business Continuity Management

Domain 4 - Cloud Application Security

• Training and Awareness in Application Security
• Understand Cloud Software Assurance and Validation
• Use Verified Secure Software
• Software Development Lifecycle (SDLC) Process
• Secure Software Development Lifecycle
• Cloud Application Architecture
• Identity and Access Management (IAM) Solutions

Domain 5 - Cloud Security Operations

• Support the Planning Process of the Data Centre Design
• Implement and Build Physical Infrastructure on Cloud Environment
• Run Physical Infrastructure for Cloud Environment
• Manage Physical Infrastructure for Cloud Environment
• Build Logical Infrastructure for Cloud Environment
• Run Logical Infrastructure for Cloud Environment
• Manage Logical Infrastructure for Cloud Environment
• Ensure Compliance with Regulations and Controls
• Conduct Risk Assessment for Logical and Physical Infrastructure
• Understand the Collection and Preservation of Digital Evidence
• Manage Communications with Relevant Parties

Domain 6 - Legal, Risk, and Compliance

• Legal Requirements and Unique Risks
• Privacy Issues Including Jurisdictional Variances
• Audit Process, Methodologies, and Required Adaptions
• Implications of Cloud to Enterprise Risk Management
• Outsourcing and Cloud Contract Design
• Execute Vendor Management