Introduction
Get up and running with cloud data
()
1. The Cloud Data Lifecycle
Module introduction
()
Learning objectives
()
Phase 1: Create
()
Phase 2: Store
()
Phase 3: Use
()
Phase 4: Share
()
Phase 5: Archive
()
Phase 6: Destroy
()
Cloud data flows
()
2. Cloud Data Security
Concepts of cloud data security
()
Data obfuscation
()
Information rights management
()
Keys, secrets, and certificate management
()
Data discovery
()
Data classification and policy
()
Auditability, traceability, and accountability
()
3. Cloud Infrastructure and Platform Components
Module introduction
()
Learning objectives
()
Physical cloud environments
()
Network cloud environments
()
Cloud communications
()
Core cloud compute resources
()
Cloud virtualization resources
()
Core cloud storage components
()
Management plane cloud solutions
()
4. Data Center Design and Risk Analysis
Learning objectives
()
Secure data center logical design
()
Physical data center design
()
Data center environmental design
()
Design resilient environments
()
Cloud infrastructure risk assessment
()
Cloud vulnerabilities, threats, and attacks
()
Cloud infrastructure risk mitigation strategies
()
5. Cloud Business Continuity Planning
Learning objectives
()
Business continuity planning
()
Business impact analysis
()
Backup and restore policies
()
Disaster recovery planning
()
Disaster recovery plan testing strategies
()
6. Application Security Awareness and Lifecycles
Module introduction
()
Learning objectives
()
Cloud application architecture elements
()
Cloud development
()
SDLC business requirements and phases
()
Common software vulnerabilities
()
Software threat modeling methods
()
Secure coding methodologies
()
Software configuration management and versioning
()
7. Software Assurance and Validation
Learning objectives
()
Functional vs. nonfunctional testing
()
Security testing methodologies
()
Abuse case testing
()
OWASP API security
()
Supply chain management
()
Third-party software management
()
8. Identity and Access Management (IAM) Solutions
Learning objectives
()
Cloud IAM services
()
Federated identity
()
Identity providers
()
Single sign-on
()
Multifactor authentication
()
Cloud access security brokers
()
Managed security service providers
()
Secrets management
()
Conclusion
Summary and next steps
()