Cloud Computing
Architectures

Cloud Computing architectures will provides the conceptual framework for the rest of the CSA guidance. It describes and defines cloud computing, sets the baseline terminology, and details the architectural frameworks.

Governance
Enterprise Risk Management

In Governance and Risk Management, we will focus on how they change in cloud computing arena and demonstrate how cloud computing impacts areas of governance and risk management; including policy, process, and internal controls.

Legal Issues and Contracts
Electronic Discovery

Legal Issues, Contracts and eDiscovery will be covered when contracting with CSPs and handling electronic discovery requests in litigation. We will focus primarily on the legal implications of using an external service provider.

Compliance and Audit Management

Big focus on the jurisdictional differences and their implications on existing compliance and audit standards, processes, and practices in Cloud Computing.
This module covers regulatory environment implications, responsibilities and capabilities for demonstrating compliance.

Information Governance

How to protect the fundamental data that powers a customer systems and applications. We will cover how to manage information in cloud computing with new technical protections and new approaches and how governance particularly impacts compliance, privacy, and corporate policies.

Infrastructure Security

We will cover all Infrastructure layers security including compute, storage and networking, which also encompass workload and hybrid cloud. This domain includes the fundamentals for private cloud computing. It does not include all the components of traditional data center security.

Virtualization and Containers

Focus on Cloud computing and virtualization that provides the abstraction needed for resource pools and managed using orchestration. Covers all those specific aspects of virtualization used to create our resource pools, especially: Compute, Network, Storage and Containers.

Incident Response

IR in Cloud seeks to identify those gaps pertinent to IR that are created by the unique characteristics of cloud computing. this can be used this as a reference when developing response plans and conducting other activities during the preparation phase of the IR lifecycle.

Application Security

Application security chapter will focus software development and IT teams who want to securely build and deploy applications in cloud computing environments, specifically PaaS and IaaS. It includes many of the techniques used to secure SaaS applications as well.

Data Security and Encryption

Encryption in Cloud and Data security controls will be covered in 3 parts. In the first part, we will cover Controlling Data in cloud. Second part will focus on Protecting and Managing Data in cloud. and we will finish with the Access controls, Encryption and Architecture.

Identity and Access Management

This module focus on how Identity and Access Management is impacted by cloud computing. In both public and private cloud, two parties are required to manage IAM without compromising security. We will also covers how cloud changes identity management and what to do about it.

Security as a Service

How SecaaS providers integrate security capabilities as a cloud service. This includes dedicated SecaaS providers, as well as features from general cloud-computing providers. we will cover all SecaaS service available and how they help secure a cloud deployment.

Amazon Best Seller CCSK v3

Amazon Best Seller CCSK v4