Introduction
Course welcome
()
1. Build and Implement a Physical and Logical Cloud Infrastructure
Hardware-specific security configuration
()
Installation and configuration of management tools
()
SDS and securing storage area networks
()
Installation of guest OS virtualization tools
()
Secure network configuration
()
Network security controls
()
Operating system hardening
()
Patch management and infrastructure as code (IaC)
()
Clustered host availability
()
Performance and capacity monitoring
()
2. Operational Controls and Standards
Configuration and change management
()
Continuity management
()
Information security management
()
Service-level management
()
Incident and problem management
()
Release and deployment management
()
Availability management
()
Capacity management
()
Security operations centers (SOC)
()
Intelligent security control monitoring
()
Vulnerability assessment
()
3. Legal Requirements, Privacy Issues, and Risk Management in the Cloud
Conflicting international legislation
()
Ediscovery and forensics
()
Issues with PHI and PII in the cloud
()
Standard privacy requirements
()
Privacy impact assessments (PIAs)
()
Risk treatment
()
Provider risk assessment programs
()
Regulatory transparency requirements
()
4. Cloud Audits, Methodologies, and Contracts
Audit controls, reports, and their impact
()
Gap analysis and internal InfoSec management systems
()
Policies and stakeholder involvement
()
Specialized compliance requirements
()
The impact of distributed IT
()
Business agreement requirements
()
Supply chain management
()
Conclusion
Summary and next steps
()