Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction to ISO 27017
- General overview of ISO/IEC 27017
- Connections with ISO 27001 and ISO 27002
- The role of governance in cloud security
Cloud Security Risks and Threats
- Prevalent security risks in cloud settings
- Vectors for cloud-based attacks
- Methods for assessing risks in cloud services
Core Information Security Controls in ISO 27017
- Supplementary controls specific to the cloud
- Distribution of security duties between CSPs and clients
- Handling data protection and encryption in cloud contexts
Establishing Cloud Security Policies
- Formulating policies for cloud integration
- Managing access and identity controls
- Handling security incidents within cloud infrastructure
Compliance and Regulatory Landscape
- Legal and regulatory aspects of cloud security
- Aligning ISO 27017 with GDPR, HIPAA, and other standards
- Processes for cloud compliance audits and certifications
Optimal Practices for Cloud Security
- Threat detection and security surveillance
- Pursuing continuous enhancement in cloud security
- Maintaining resilience and disaster recovery capabilities
Practical Application and Case Analyses
- Applying ISO 27017 controls in real-world contexts
- Analyzing various cloud security case studies
- Interactive tasks focused on cloud security strategy
Recap and Future Actions
Requirements
- Fundamental grasp of cloud computing concepts
- Understanding of broad information security principles
- Awareness of ISO 27001 or comparable cybersecurity frameworks
Target Audience
- Professionals specializing in cloud security
- IT security management personnel
- Compliance specialists
- Cloud service providers
Testimonials (2)
Theory followed by practical examples and exercices. Job well done!
Vincenzo Delle Donne - Department of National Defence
Course - ISO 37301 Compliance Management System
the expertise & knowledge of the trainer
