Course Outline
Module 1. Cloud Architecture
This module establishes the foundational principles of cloud computing, defining core concepts, architectural frameworks, and the role of virtualization in modern infrastructure. It examines cloud service models, delivery mechanisms, and inherent characteristics, providing a strategic framework for integrating cloud security into public sector operations.
Topics Covered:
- Unit 1 - Introduction to Cloud Computing
- Unit 2- Introduction & Cloud Architecture
- Unit 3 - Cloud Essential Characteristics
- Unit 4 - Cloud Service Models
- Unit 5 - Cloud Deployment Models
- Unit 6 - Shared Responsibilities
Module 2. Infrastructure Security for Cloud
This section addresses the security of core cloud infrastructure components, including network structures, management interfaces, and credential administration. It explores virtual networking, workload protection, and the security implications of containerized and serverless environments, ensuring robust safeguards for government-grade systems.
Topics Covered:
- Unit 1 - Module Intro
- Unit 2 - Intro to Infrastructure Security for Cloud Computing
- Unit 3 - Software Defined Networks
- Unit 4 - Cloud Network Security
- Unit 5 - Securing Compute Workloads
- Unit 6 - Management Plane Security
- Unit 7 - BCDR
Module 3. Managing Cloud Security and Risk
This module outlines the governance and risk management practices essential for cloud security oversight. It covers risk assessment, legal and compliance obligations, and specific regulatory requirements such as data discovery in cloud environments. The curriculum also incorporates key Cloud Security Alliance (CSA) risk assessment tools, including the CAIQ, CCM, and STAR registry, to support accountability and standardization.
Topics Covered:
- Unit 1 - Module Introduction
- Unit 2 - Governance
- Unit 3 - Managing Cloud Security Risk
- Unit 4 - Legal
- Unit 5 - Legal Issues In Cloud
- Unit 6 - Compliance
- Unit 7 - Audit
- Unit 8 - CSA Tools
Module 4. Data Security for Cloud Computing
This module focuses on information lifecycle management within cloud environments, with a specific emphasis on applying security controls in public cloud contexts. It details data storage models, security challenges associated with various delivery models, and encryption strategies, including the implementation of customer-managed keys (BYOK) to protect sensitive data for government agencies.
Topics Covered:
- Unit 1 - Module Introduction
- Unit 2 - Cloud Data Storage
- Unit 3 - Securing Data In The Cloud
- Unit 4 - Encryption For IaaS
- Unit 5 - Encryption For PaaS & SaaS
- Unit 6 - Encryption Key Management
- Unit 7 - Other Data Security Options
- Unit 8 - Data Security Lifecycle
Module 5. Application Security and Identity Management for Cloud Computing
This module covers identity management and application security protocols for cloud deployments. It examines federated identity systems, Identity and Access Management (IAM) applications, secure development practices, and the strategic management of application security to meet the operational and security requirements for government digital services.
Topics Covered:
- Unit 1 - Module Introduction
- Unit 2 - Secure Software Development Life Cycle (SSDLC)
- Unit 3 - Testing & Assessment
- Unit 4 - DevOps
- Unit 5 - Secure Operations
- Unit 6 - Identity & Access Management Definitions
- Unit 7 - IAM Standards
- Unit 8 - IAM In Practice
Module 6. Cloud Security Operations
This module details the criteria for evaluating, selecting, and managing cloud service providers. It analyzes the role of Security as a Service (SECaaS) providers and assesses the impact of cloud environments on incident response capabilities, ensuring alignment with public sector operational standards.
Topics Covered:
- Unit 1 - Module Introduction
- Unit 2 - Selecting A Cloud Provider
- Unit 3 - SECaaS Fundamentals
- Unit 4 - SECaaS Categories
- Unit 5 - Incident Response
- Unit 6 - Domain 14 Considerations
- Unit 7 - CCSK Exam Preparation
Testimonials (1)
A wide range of knowledge of the lecturer.
