Cloud Concepts, Architecture and Design
- Cloud Computing Concepts
- Cloud Reference Architecture
- Security Concepts Relevant to Cloud Computing
- Design Principles of Secure Cloud Computing
- Evaluation of Cloud Service Providers
Cloud Data Security
- Cloud Data Concepts
- Cloud Data Storage Architecture
- Data Security Technologies and Strategies
- Data Discovery
- Data Classification
- Information Rights Management Data Retention, Deletion, Archiving Policies
- Auditability, Traceability, Accountability of Data Events
Cloud Platform and Infrastructure Security
- Cloud Infrastructure Components
- Secure Data Center
- Risks associated with Cloud Infrastructure
- Security Controls
- Disaster Recovery (DR) and Business Continuity (BC)
Cloud Application Security
- Training and Awareness for Application Security Secure Software Development Lifecycle (SDLC)
- Cloud Software Assurance and Verification
- Verified Secure Software
- Specifics of Cloud Application
- Architecture Identity and Access Management (IAM) Solution
Cloud Security Operations
- Physical and Logical Infrastructure for Cloud Environment
- Operational Controls and Standards
- Digital Forensics
- Communication with Relevant Parties
Legal, Risk and Compliance
- Legal Requirements and unique Risks within the Cloud Environment
- Privacy Issues, Juristicional Variance
- Audit Process, Methodologies, and required Adaptations for a Cloud Environment
- Implications of Cloud to Enterprise Risk Management
- Outsourcing and Cloud Contract Design