Get in Touch
 Duration 14 hours

Course Outline

Introduction to ISO 27017

  • Overview of the ISO/IEC 27017 standard
  • Relationship between ISO 27001, ISO 27002, and ISO 27017
  • The critical role of cloud security governance

Cloud Security Risks and Threats

  • Common security risks inherent in cloud environments
  • Analysis of cloud-based attack vectors
  • Risk assessment methodologies applicable to cloud services

Key Information Security Controls in ISO 27017

  • Additional controls tailored for cloud contexts
  • Shared security responsibilities between CSPs and end-users
  • Strategies for data protection and encryption in the cloud

Implementing Cloud Security Policies

  • Formulating security policies for cloud adoption
  • Managing access control and identity frameworks
  • Handling security incidents within cloud environments

Compliance and Regulatory Considerations

  • Legal and regulatory impacts of cloud security practices
  • Mapping ISO 27017 controls to GDPR, HIPAA, and other regulations
  • Processes for cloud compliance audits and certification

Best Practices for Cloud Security

  • Techniques for security monitoring and threat detection
  • Driving continuous improvement in cloud security operations
  • Safeguarding resilience and disaster recovery capabilities

Hands-On Implementation and Case Studies

  • Applying ISO 27017 controls in realistic scenarios
  • Analyzing notable cloud security case studies
  • Participating in interactive exercises focused on cloud security strategy

Summary and Next Steps

Requirements

  • Fundamental understanding of cloud computing concepts
  • Awareness of general information security principles
  • Familiarity with ISO 27001 or alternative cybersecurity frameworks

Target Audience

  • Cloud security specialists
  • IT security managers
  • Compliance officers
  • Cloud service providers

Testimonials (1)

Related Categories