Cloud Security Fundamentals
Cloud Security Fundamentals
This SANS training course, Cloud Security Fundamentals (SEC524), starts out with a detailed introduction to the various delivery models of cloud computing, ranging from Software as a Service (SaaS) to Infrastructure as a Service (IaaS) and everything in between. Each of these delivery models represent an entirely separate set of security conditions to consider, especially when coupled with various cloud types, including public, private and hybrid. An overview of security issues within each of these models will be covered with an in-depth discussion of the risks involved. This cloud security training course will go in-depth on architecture and infrastructure fundamentals for private, public and hybrid clouds, including a wide range of topics such as patch and configuration management, virtualization security, application security and change management. Policy, risk assessment and governance within cloud environments will also be covered, with recommendations for both internal policies and contract provisions. This path leads to a discussion of compliance and legal concerns. The first day will wrap up with disaster recovery and business continuity planning using cloud models and architecture.
Day 2 of this cloud security training course will start with the challenges of identity and access management in cloud environments. Next, more businesses are utilizing the cloud to store critical data and we will cover how to protect your critical data in the cloud. New approaches for data encryption, network encryption, key management and data lifecycle concerns will be covered in detail, followed by a deep dive into risk assessments and risk management. Intrusion detection and incident response in cloud environments will also be covered, along with how best to manage these critical security processes and the technologies that support them given that most controls are managed by the CSP.
- Build a risk-based assessment program for cloud providers' controls
- Understand the key areas to focus on in cloud contracts
- Evaluate the various layers of cloud infrastructure
- Develop a cloud disaster recovery and business continuity plan
- Perform vulnerability assessments in a cloud environment
- Integrate encryption and identity management services in a cloud environment
- Improve your incident response and monitoring capabilities in the cloud
The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.