Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
DAY 1: ISO/IEC 27017 Fundamentals, Framework Architecture, and Cloud Risk Management
- Module 1: Introduction to ISO/IEC 27017 – Comprehensive overview, alignment with ISO/IEC 27001 and 27002, and definition of standard objectives for public sector implementation.
- Module 2: Scope of ISO/IEC 27017 – Examination of supplementary controls, cloud environment applications, and defined audit boundaries for government systems.
- Module 3: ISO/IEC 27017 Certification Scheme – Analysis of the certification model as an extension of ISO/IEC 27001 for cloud service providers serving governmental entities.
- Module 4: ISO/IEC 27017 Auditor Competency Model – Evaluation of required competencies, technical proficiency in cloud infrastructure, and risk-based audit methodologies for public sector auditors.
- Module 5: Cloud-Specific Risk Assessment – Identification of risks related to virtual machine management, multi-tenancy, data isolation, and legal jurisdictional compliance.
- Module 6: Cloud Service Categories – Assessment of audit implications across Service Models (SaaS, PaaS, IaaS, NaaS, and DSaaS) relevant to federal and state operations.
- Module 7: ISO/IEC 27017 Specific Controls – Review of shared responsibility models, virtual machine hardening standards, and continuous cloud service monitoring protocols.
- Module 8: Control Mapping to Cloud Services – Alignment of security controls with Identity and Access Management (IAM), cloud logging, Key Management Services (KMS), and Virtual Private Clouds (VPC).
DAY 2: Technical Audit Simulation and Regulatory Compliance Integration
- Module 9: Audit Simulation Planning – Definition of audit scope (e.g., GCP/Organization structure) and methodology for resource sampling in government cloud environments.
- Module 10: Cloud Control Audit Simulation (Practical Application) – Execution of audits on Access Control, Resource Configuration, and Security Posture using verified government data sources.
- Module 11: Cloud Regulations & Compliance Requirements
- Regulatory Framework Analysis: Comprehensive review of POJK 11/2022 and PADK No. 1 Year 2026 concerning Information Technology Implementation within commercial banking sectors.
- Compliance Alignment: Direct mapping of ISO/IEC 27017 controls to local financial sector regulatory mandates to ensure for government and private sector accountability.
- Module 12: ISO/IEC 27017 Certification Audit Process – Examination of audit techniques, standard methodology, and lifecycle management for government-certified auditors.
- Module 13: Integrated Audit Guidance – Comparative analysis of ISO/IEC 27001, 27017, and 27018 to support unified information security governance.
- Module 14: Final Workshop – End-to-end audit simulation, development of formal findings, and presentation of audit results to stakeholders.
Requirements
- Foundational knowledge of information technology security principles
- Operational experience with IT security frameworks and cloud infrastructure
Target Participants
- Information security personnel within banking institutions
- Security professionals at other financial services entities
14 Hours
Testimonials (3)
I found new things.
Cristian
Course - OpenStack Security
Azure web security, it was more what i was expecting, the penetration testing i would never do in my job
Toby
Course - Application Security in the Cloud
A wide range of knowledge of the lecturer.
