(ISC)²

ITM4710 - Managing Cloud Security

(ANC-ITM4710.AE1)
Lessons
Lab
TestPrep
Get A Free Trial

Skills You’ll Get

Download Course Outline

1

Architectural Concepts

  • Cloud Characteristics
  • Business Requirements
  • Cloud Evolution, Vernacular, and Models
  • Cloud Computing Roles and Responsibilities
  • Cloud Computing Definitions
  • Foundational Concepts of Cloud Computing
  • Related and Emerging Technologies
  • Written Labs
2

Design Requirements and Data Classification

  • Business Requirements Analysis
  • Security Considerations for Different Cloud Categories
  • Design Principles for Protecting Sensitive Data
  • Data Inventory and Discovery
  • Jurisdictional Requirements
  • Information Rights Management (IRM)
  • Data Control
  • Written Labs
3

Cloud Data Security, Security and Responsibilities in the Cloud

  • Cloud Data Lifecycle
  • Cloud Storage Architectures
  • Cloud Data Security Foundational Strategies
  • Shared Cloud Platform Risks and Responsibilities
  • Cloud Computing Risks by Deployment Model
  • Cloud Computing Risks by Service Model
  • Virtualization
  • Disaster Recovery (DR) and Business Continuity (BC)
  • Foundations of Managed Services
  • Business Requirements
  • Shared Responsibilities by Service Type
  • Shared Administration of OS, Middleware, or Applications
  • Shared Responsibilities: Data Access
  • Lack of Physical Access
  • Written Labs
4

Cloud Application Security, Operations Elements and Operations Management

  • Training and Awareness
  • Cloud-Secure Software Development Lifecycle (SDLC)
  • ISO/IEC 27034-1 Standards for Secure Application Development
  • Identity and Access Management (IAM)
  • Cloud Application Architecture
  • Cloud Application Assurance and Validation
  • Physical/Logical Operations
  • Security Operations Center
  • Monitoring, Capacity, and Maintenance
  • Change and Configuration Management (CM)
  • IT Service Management and Continual Service Improvement
  • Business Continuity and Disaster Recovery (BC/DR)
  • Written Labs
5

Legal and Compliance

  • Legal Requirements and Unique Risks in the Cloud Environment
  • Potential Personal and Data Privacy Issues in the Cloud Environment
  • Audit Processes, Methodologies, and Cloud Adaptations
  • The Impact of Diverse Geographical Locations and Legal Jurisdictions
  • Business Requirements
  • Cloud Contract Design and Management for Outsourcing
  • Identifying Appropriate Supply Chain and Vendor Management Processes
  • Written Labs

1

Architectural Concepts

  • Creating a Virtual Machine and Installing Ubuntu Using Hyper-V Manager
  • Installing Ubuntu Using Hyper-V Manager
2

Design Requirements and Data Classification

  • Creating a Demilitarized Zone
  • Displaying Metadata Information
  • Creating a Standard ACL
  • Enabling an Access Control List
3

Cloud Data Security, Security and Responsibilities in the Cloud

  • Building IPSec VPN
  • Configuring RAID 5
  • Installing Web Application Proxy
  • Taking a Full Backup
4

Cloud Application Security, Operations Elements and Operations Management

  • Authorizing a User
  • Examining File Permissions
  • Conducting Cross-Site Request Forgery with Low Complexity
  • Setting Up a Honeypot on Kali Linux
5

Legal and Compliance

  • Completing the Chain of Custody