Cursul Cloud Security Officer, C)CSO, de la Mile2 îți va oferi ceva ce nu vei găsi în alte cursuri! Cloud-ul este adoptat pe scară largă în prezent dintr-un set divers de motive. Cu toate acestea, mulți constată că securitatea în cloud este o provocare uriașă.
C)CSO caută să umple golul din educația privind securitatea în cloud și să îți ofere abilitățile de care ai nevoie pentru a elabora o securitate puternică în cloud. Ceea ce face ca acest curs să fie performant este asocierea cunoștințelor de la liderii din domeniul securității cloud, cu exerciții practice de laborator. Vei pleca de la curs cu o înțelegere solidă a sistemului cloud, după ce vei fi introdus în multe tehnologii utilizate în cloud. Fie că implementezi o arhitectură de cloud privat sau gestionezi soluții de la diverși furnizori, acest curs este pentru tine.
La finalizare, studenții Certified Cloud Security Officer vor înțelege securitatea cloud dintr-un punct de vedere real și vor înțelege standardele de securitate din industrie. De asemenea, studentul va fi pregătit să susțină examenul C)CSO.
Înainte de a urma acest curs, trebuie să aveți:
- 12 luni de experiență cu tehnologia de virtualizare sau cunoștințe echivalente
- Înțelegere generală a arhitecturilor cloud
- Minim 12 luni de experiență în domeniul securității generale
Module 1 – Introduction to Cloud Computing and Architecture
- Cloud Computing Terminology
- Cloud Computing Definition
- Cloud Computing Characteristics
- Cloud Computing Benefits
- Cost Benefit Analysis Reference Model
- What is Security for the Cloud?
Module 2 – Cloud Risks
- Cloud Migration Security Evaluation
- ENISA Risk Evaluation
- Cloud Controls Matrix
- Relevant CCM Controls
Module 3 – ERM and Governance
- Application of Governance and Risk Management to the Cloud
- Importance of the SLA
- Relevant CCM controls
Module 4 – Legal Issues
- Understanding Unique Risks in the Cloud International Law and Potential Conflicts eDiscovery
- Contract Considerations
- Relevant CCM Controls
Module 5 – Virtualization
- Virtualization Principles
- Key Components Mapped to Cloud Layer
- Key Security Concerns
- Other Technologies Used in the Cloud
- The Layers
- Relevant CCM Controls
Module 6 – Data Security
- Cloud Data Life Cycle
- Design and Implement Cloud Data Storage Architectures
- Design and Apply Data Security Strategies Understand and Implement Data Discovery and Classification Technologies
- Design and Implement Relevant Jurisdictional Data Protection for PII
- Design and Implement Data Rights Management
- Plan and Implement Data Retention, Deletion and Archival Policies
- Design and Implement Auditability, Traceability, and Accountability of Data Events
- Relevant CCM Controls
Module 7 – Data Center Operation
- Build Logical Infrastructure for Cloud Environment
- Manage Logical Infrastructure for Cloud Environment
- Manage Communications with Relevant Parties
- Relevant CCM Controls
Module 8 – Interoperability and Portablility
- Interoperability
- Portability
- Relevant CCM Controls
Module 9 – Traditional Security
- The Physical Environment
- Support the Planning Process for the Data Center Design
- Run Physical Infrastructure for Cloud Environment
- Implement and Build Physical Infrastructure for Cloud Environment
- Manage Physical Infrastructure for Cloud Environment
- Relevant CCM Controls
Module 10 – BCM and DR
- Disaster Recovery and Business Continuity Management
- Examples
- Relevant CCM Controls
Module 11 – Incident Response
- Incident Response
- Forensics
- Relevant CCM Controls
Module 12 – Application Security
- Training and Awareness
- Secure Software Development Life Cycle Process
- Application of the Secure Software Development Life Cycle
- Verifying the use of Secure Software
- Identity and Access Management (IAM) Solutions
- Additional components for the Cloud Software Assurance and Validation
- Relevant CCM Controls
Module 13 – Encryption and Key Management
- Review from other chapters
- Key Management in today’s cloud services
- Recommendations
- Relevant CCM Controls
Module 14 – Identity, Entitlement and Access Management
- Introduction to Identity and Access Management Identities and Attributes
- Architectures for Interfacing to Identity and Attribute Providers
- The Identity Recommendations
- Relevant CCM Controls
Module 15 – Auditing and Compliance
- Compliance and Audit Cloud Issues Assurance Frameworks
- Auditing
- Relevant CCM Controls
Labs
- Lab 1: Cloud Migration Evaluation
- Lab 2: Service Level Agreement (SLA) Compliance Lab 3: Virtualization 101
- Lab 4: Understanding Network Traffic
- Lab 5: Hardening your Virtual Machines
- Lab 6: ESXi Host Hardening
- Lab 7: Hardening vCenter
- Lab 8: Basics of Data Security in Azure
- Lab 9: IaaS
- Lab 10: Deploying a Cloud
- Lab 11: Basic Data Center Operations in Azure
- Lab 12: Interoperability and Portability
- Lab 13: Business Continuity in Azure
- Lab 14: PaaS in Azure
- Lab 15: Encryption in Azure
- Lab 16: Identity and Access Management in Azure
- Lab 17: SaaS
- Lab 18: S-P-I Model Exercise
- Lab 19: Cloud Business Driver Audit Exercise
- Lab 20: IaaS Risk Assessment
- Lab 21: Identity and Access Control Management in the Private Cloud
- Lab 22: VM Security Audit
- Lab 23: Encryption/Key Management in SaaS
Acest curs îi pregătește pe participanți pentru susținerea examenului C)CSO și obținerea certificării de Certified Cloud Security Officer.
