Course Outline
Domain 1: Architectural Concepts and Design Requirements
- Demonstrate a comprehensive understanding of cloud computing concepts for government.
- Provide an overview of the cloud reference architecture for government operations.
- Understand security principles specific to cloud computing for government applications.
- Grasp design principles for secure cloud computing in government environments.
- Identify trusted cloud services suitable for government use.
Domain 2: Cloud Data Security
- Understand the cloud data lifecycle, following guidance from the Cloud Security Alliance (CSA) for government agencies.
- Design and implement secure cloud data storage architectures for government systems.
- Develop and apply robust data security strategies for government data.
- Implement data discovery and classification technologies for government datasets.
- Design and enforce jurisdictional data protections for Personally Identifiable Information (PII) in government contexts.
- Create and implement data rights management solutions for government use.
- Plan and execute data retention, deletion, and archiving policies for government data.
- Ensure auditability, traceability, and accountability of data events within government systems.
Domain 3: Cloud Platform and Infrastructure Security
- Understand the components of cloud infrastructure for government operations.
- Analyze risks associated with cloud infrastructure in government environments.
- Design and plan security controls tailored to government needs.
- Develop disaster recovery and business continuity management strategies for government agencies.
Domain 4: Cloud Application Security
- Recognize the importance of training and awareness in application security for government personnel.
- Understand cloud software assurance and validation processes for government applications.
- Utilize verified secure software in government systems.
- Comprehend the software development life-cycle (SDLC) process as it applies to government projects.
- Apply a secure SDLC to government application development.
- Understand the unique architecture of cloud applications for government use.
- Design effective identity and access management (IAM) solutions for government applications.
Domain 5: Operations
- Support the planning process for data center design in government environments.
- Implement and build physical infrastructure for cloud environments in government agencies.
- Operate physical infrastructure for cloud environments in government settings.
- Manage physical infrastructure to ensure reliability and security in government operations.
- Build logical infrastructure for cloud environments in government contexts.
- Operate logical infrastructure to support government cloud services.
- Manage logical infrastructure to maintain compliance and efficiency in government systems.
- Ensure compliance with regulations and controls (e.g., ITIL, ISO/IEC 20000-1) for government operations.
- Conduct risk assessments for both logical and physical infrastructure in government environments.
- Understand the collection, acquisition, and preservation of digital evidence for government investigations.
- Manage communication with relevant parties to ensure effective governance and accountability in government operations.
Domain 6: Legal and Compliance
- Understand legal requirements and unique risks associated with cloud environments in government settings.
- Address privacy issues, including jurisdictional variations, for government data.
- Comprehend the audit process, methodologies, and required adaptations for a government cloud environment.
- Understand the implications of cloud services on enterprise risk management for government agencies.
- Grasp the principles of outsourcing and cloud contract design for government contracts.
- Execute effective vendor management practices in government procurement processes.
Requirements
Recommended Prerequisites: Completion of the Certified Information Systems Security Professional (CISSP) certification for government personnel.
Testimonials (3)
Azure web security, it was more what i was expecting, the penetration testing i would never do in my job
Toby
Course - Application Security in the Cloud
The trainer was extremely knowledgable and helpful. While walking through the exercises, I wasn't rushed and was allowed to make mistakes (to a point) and then help was given to correct to them where needed.
Tim Wilkes - Gamma
Course - OpenStack Security
The way in which he explained to us during the 2 days and his way of being, which makes learning enjoyable.