1 – Architecture Concepts and Design Requirements
- Cloud computing concepts
- Cloud reference architecture
- Security concepts for cloud computing
- Design principles for secure cloud computing
- Trusted cloud services
2 – Cloud Data Security
- CSA (Cloud Security Alliance) cloud data lifecycle
- Architectures for data storage in the cloud
- Data security strategies
- Data discovery and classification technologies
- Protecting privacy and PII (personally identifiable information)
- Data Rights Management
- Policies for data retention, deletion and archiving
- Auditability, traceability and accountability of data events
3 – Cloud Platform and Infrastructure Security
- Cloud infrastructure components
- Cloud infrastructure risks
- Designing and planning security controls
- Disaster recovery and business continuity management
4 – Cloud Application Security
- Need for security awareness and training in application security
- Software assurance and validation in the cloud
- Verified secure software
- SDLC process (Software Development Life Cycle)
- Secure SDLC
- Specifics of cloud application architecture
- Secure IAM solutions (Identity and Access Management)
5 – Operations
- Planning process for data centre design
- Installation and configuration of the physical infrastructure for the cloud environment
- Operation of the physical infrastructure for the cloud environment
- Management of the physical infrastructure for the cloud environment
- Installation and configuration of the logical infrastructure for the cloud environment
- Operation of the logical infrastructure for the cloud environment
- Management of the logical infrastructure for the cloud environment
- Compliance with regulations and controls
- Risk assessment for the logical and physical infrastructure
- Collection, acquisition and preservation of digital evidence
- Managing communication with stakeholders
6 – Legal and Compliance
- Legal requirements and specific risks in the cloud environment
- Relevant laws and regulations on data protection and PII
- Audit process, methods and required adjustments for a cloud environment
- Impact of the cloud on enterprise risk management
- Outsourcing and structuring of cloud contracts
- Vendor management
