ISO 27017 Cloud Security Lead Implementer

Develop and improve cloud security arrangements by working through cloud responsibilities, security controls and risk treatment.

Work through cloud responsibilities, security controls and risk treatment and connect them to the responsibilities of your implementation role. The detailed programme explains the methods and activities covered.

• Understand the principles and concepts of cloud security
• Learn about the requirements and recommendations of ISO/IEC 27017:2015
• Gain practical knowledge of implementing cloud security controls and measures
• Develop skills for assessing cloud security risks and implementing appropriate controls
• Prepare for certification as an ISO 27017 Lead Implementer

• Interpret the requirements of ISO/IEC 27017:2015 and apply them to cloud environments
• Implement cloud security controls and measures in accordance with ISO/IEC 27017:2015
• Assess cloud security risks and develop risk mitigation strategies
• Establish and maintain an effective cloud security management system
• Prepare for and pass the ISO 27017 Lead Implementer certification exam

• Information security managers
• Cloud architects
• IT professionals responsible for cloud security
• Compliance officers
• Risk managers
• Anyone involved in the implementation and management of cloud-based services

• ISO/IEC 27001:2013 - Information Security Management Systems (ISMS)
• NIST Special Publication 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
• CSA Security Guidance for Critical Areas of Focus in Cloud Computing

1. Introduction to Cloud Security
   • Overview of cloud computing and its security challenges
   • Introduction to ISO/IEC 27017:2015 and its objectives
2. Scope and Applicability of ISO/IEC 27017:2015
   • Understanding the scope and applicability of ISO/IEC 27017:2015
   • Differentiating between cloud service models (IaaS, PaaS, SaaS)
3. Cloud Security Principles and Concepts
   • Confidentiality, integrity, and availability in cloud environments
   • Shared responsibility model and cloud security roles
4. Risk Assessment and Management in Cloud Computing
   • Cloud security risk assessment methodologies
   • Identifying and evaluating cloud security risks
5. ISO/IEC 27017 Controls and Implementation Guidelines
   • Security controls for cloud service providers and customers
   • Implementing technical and organizational controls in cloud environments
6. Cloud Security Architecture and Design
   • Designing secure cloud architectures
   • Secure configuration and deployment of cloud services
7. Incident Response and Business Continuity in Cloud Environments
   • Cloud incident response planning and procedures
   • Business continuity and disaster recovery planning for cloud services
8. Monitoring, Measurement, and Continual Improvement
   • Monitoring cloud security controls and performance
   • Conducting audits and assessments of cloud security practices
9. Legal and Compliance Considerations
   • Legal and regulatory requirements applicable to cloud computing
   • Data protection and privacy considerations in cloud environments
10. Case Studies and Practical Exercises
    • Real-world case studies and scenarios in cloud security implementation
    • Hands-on exercises to reinforce learning objectives