Module VI – Cloud Security

Teacher

Course Outline

Domain 1 – Cloud Concepts, Architecture and Design

● Understand cloud computing concepts
● Describe cloud reference architecture
● Understand security concepts relevant to cloud computing
● Understand design principles of secure cloud computing
● Evaluate cloud service providers

Domain 2 – Cloud Data Security

● Describe cloud data concepts
● Design and implement cloud data storage architectures
● Design and apply data security technologies and strategies
● Implement data discovery
● Plan and implement data classification
● Design and implement Information Rights Management (IRM)
● Plan and implement data retention, deletion and archiving policies
● Design and implement auditability, traceability and accountability of data events

Domain 3 – Cloud Platform and Infrastructure Security

● Comprehend cloud infrastructure and platform components
● Design a secure data center
● Analyze risks associated with cloud infrastructure and platforms
● Plan and implementation of security controls

● Plan business continuity (BC) and disaster recovery (DR)

Domain 4 – Cloud Application Security

● Advocate training and awareness for application security
● Describe the Secure Software Development Life Cycle (SDLC) process
● Apply the Secure Software Development Life Cycle (SDLC)
● Apply cloud software assurance and validation
● Use verified secure software.
● Comprehend the specifics of cloud application architecture
● Design appropriate identity and access management (IAM) solutions

Domain 5 – Cloud Security Operations

● Build and implement physical and logical infrastructure for the cloud
environment
● Operate and maintain physical and logical infrastructure for cloud environment
● Implement operational controls and standards (e.g., Information Technology
Infrastructure Library (ITIL), International Organization for
Standardization/International Electrotechnical Commission (ISO/IEC) 20000-
1).
● Support digital forensics
● Manage communication with relevant parties
● Manage security operations

Domain 6 – Legal, Risk and Compliance
● Articulate legal requirements and unique risks within the cloud environment
● Understand privacy issues
● Understand the audit process, methodologies, and required adaptations for a
cloud environment.
● Understand implications of cloud to enterprise risk management
● Understand outsourcing and cloud contract design

https://www.isc2.org/Certifications/CCSP

	Topic	Professor	Certification Goal
Module 0	Cyber101	Gael Beauboeuf	N-A
Module 1	Network Fundamentals	Stanley Paul/Jhon Noel	Network+
Module 2	Cybersecurity Fundamentals	Gael Beauboeuf/ Paul Jn Marie	Security+
Module 3	Business continuity management	Lyonel Valles	Certified Business Continuity Professional (CBCP)
Module 4	Information security governance	Anglade Perrier	CISM
Module 5	Threat Analysis & Vulnerability Assessment	X	GIAC Cyber Threat Intelligence (GCTI)
Module 6	Cloud Security	Anglade Perrier	CCSP – Certified Cloud Security Professional
Module 7	Cyberdefense Analysis	Blaise Arbouet	CSA: Certified SOC Analyst
Module 8	Information System Audit	Lyonel Valles/Franco Jean Louis	CISA
Module 9	Penetration testing	Valentin Beaumont	OSCP
Module 10	Forensic Analysis	Blaise Arbouet	GIAC Certified Forensic Examiner (GCFE)