Get in Touch

Course Outline

Overview of ISO/IEC 27017 Framework

  • Scope and application of ISO/IEC 27017
  • Alignment with ISO/IEC 27001 and ISO/IEC 27002 standards
  • Significance of cloud security governance for federal operations

Cloud Security Risks and Threat Landscape

  • Precise identification of security risks within cloud environments
  • Analysis of cloud-specific attack vectors
  • Methodologies for conducting risk assessments of cloud service providers

Core Information Security Controls in ISO/IEC 27017

  • Implementation of cloud-specific security controls
  • Clarification of shared security responsibilities between Cloud Service Providers (CSPs) and government agencies
  • Data protection mechanisms and encryption standards in cloud infrastructure

Development and Execution of Cloud Security Policies

  • Establishment of security policies to support cloud adoption
  • Management of access controls and identity management systems
  • Procedures for cloud-based security incident management

Compliance and Regulatory Requirements

  • Legal and regulatory implications governing cloud security practices
  • Alignment of ISO/IEC 27017 requirements with GDPR, HIPAA, and other applicable regulations
  • Protocols for cloud compliance audits and certification processes

Cloud Security Best Practices

  • Continuous security monitoring and threat detection capabilities
  • Strategies for ongoing improvement of cloud security posture
  • Ensuring operational resilience and effective disaster recovery planning

Practical Application and Case Studies

  • Application of ISO/IEC 27017 controls in real-world government contexts
  • Review of relevant cloud security case studies
  • Interactive exercises focused on developing cloud security strategies for government

Summary and Next Steps

Requirements

  • Fundamental comprehension of cloud computing architectures
  • Proficiency in core information security tenets
  • Working knowledge of ISO 27001 and comparable cybersecurity standards

Target Audience

  • Cloud security specialists
  • IT security leadership
  • Regulatory compliance personnel
  • Cloud infrastructure providers

This resource is designed for government entities seeking to align their cloud security practices with established federal governance standards.

 14 Hours

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories