ISO 27017 Information Security Controls For Cloud Services - United Kingdom

ISO 27017 Information Security Controls for Cloud Services​ Course Outline

Module 1: Introduction

• Scope
• Normative References
  • Identical Recommendations | International Standards
  • Additional References
• Definitions and Abbreviations

Module 2: Cloud Sector-Specific Concepts

• Overview
• Supplier Relationships in Cloud Services
• Relationships Between Cloud Service Customers and Cloud Service Providers
• Managing Information Security Risks in Cloud Services
• Structure of this Standard

Module 3: Information Security Policies and Organisation of Information Security

• Management Direction for Information Security
• Organisation of Information Security

Module 4: Introduction to Human Resource Security and Asset Management

• Human Resource Security
  • Prior to Employment
  • During Employment
  • Implementation Guidance for Cloud Services
  • Termination and Change of Employment
• Asset Management
  • Responsibility for Assets
  • Implementation Guidance for Cloud Services
  • Information Classification
  • Media Handling

Module 5: Define Access Control and Cryptography

• Access Control
  • Business Requirements of Access Control
  • Implementation Guidance for Cloud Services
  • User Access Management
  • User Access Management
  • System and Application Access Control
• Cryptography
  • Cryptographic Controls

Module 6: Physical, Environmental, and Operations Security

• Secure Areas
• Equipment
• Operations Security
  • Operational Procedures and Responsibilities
  • Protection from Malware
  • Backup
  • Logging and Monitoring
  • Control of Operational Software
  • Technical Vulnerability Management
  • Information Systems Audit Considerations

Module 7: Communications Security, System Acquisition, Development and Maintenance

• Communications Security
  • Network Security Management
  • Information Transfer
• System Acquisition, Development and Maintenance Security
  • Security Requirements of Information Systems
  • Security in Development and Support Processes
  • Test Data

Module 8: Supplier Relationships and Information Security Incident Management

• Supplier Relationships
  • Information Security in Supplier Relationships
  • Supplier Service Delivery Management
• Information Security Incident Management
  • Management of Information Security Incidents and Improvements

Module 9: Information Security Aspects of Business Continuity Management and Compliance

• Information Security Continuity
• Redundancies
• Compliance
  • Compliance with Legal and Contractual Requirements
  • Information Security Reviews

Who should attend this ISO 27017 Information Security Controls for Cloud Services Course?

The ISO 27017 Information Security Controls for Cloud Services Training Course provides professionals with an understanding of information security controls specifically tailored for cloud computing environments. This course can be beneficial for a variety of professionals, including:

• Cloud Security Managers
• Information Security Managers
• IT Managers and Professionals
• Risk Management Professionals
• Auditors
• Security Consultants
• Compliance Officers

Prerequisites of the ISO 27017 Information Security Controls for Cloud Services Course

There are no formal prerequisites for this ISO 27017 Information Security Controls for Cloud Services Training Course.

ISO 27017 Information Security Controls for Cloud Services Course Overview

ISO 27017 is a set of guidelines and controls specifically designed for securing Cloud Services, building upon the ISO 27002 standard. These controls focus on cloud-specific risks and provide a robust framework for organisations to safeguard their cloud-based environments, ensuring the confidentiality, integrity, and availability of data. This standard is crucial for both cloud service providers and users, facilitating a secure and trustworthy cloud ecosystem.

Proficiency in ISO 27017 is vital for Information Security Managers, Cloud Security Engineers, Compliance Officers, and IT Auditors. Mastering this standard enables professionals to implement comprehensive cloud security measures, conduct risk assessments, and ensure compliance with regulatory requirements. It is essential for those aiming to enhance their organisation's cloud security posture and protect sensitive information in cloud environments.

This intensive 2-day course equips delegates with fundamental concepts and practical skills in implementing ISO 27017 controls. Through hands-on workshops and expert-led sessions, delegates comprehensively understand cloud-specific security threats, risk management strategies, and the application of ISO 27017 controls. Delegates learn to develop cloud security policies, perform audits, and implement best practices to secure Cloud Services.

Course Objectives

• To understand the foundational principles of ISO 27017 and its relevance to cloud security
• To explore various cloud-specific security threats and risk management strategies
• To apply ISO 27017 controls in real-world cloud environments
• To develop and implement cloud security policies and procedures
• To perform audits and assessments to ensure compliance with ISO 27017
• To comprehend ethical considerations in cloud security management

Upon completing this course, delegates will have acquired the knowledge and skills necessary to implement and manage ISO 27017 controls effectively, making them invaluable assets in ensuring the security of Cloud Services within their organisations.

What’s included in this ISO 27017 Information Security Controls for Cloud Services Course?

• ISO 27017 Information Security Controls for Cloud Services Examination
• World-Class Training Sessions from Experienced Instructors 
• ISO 27017 Information Security Controls for Cloud Services Certificate
• Digital Delegate Pack

ISO 27017 Information Security Controls for Cloud Service Exam

To achieve the ISO 27017 Information Security Controls for Cloud Services, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice  
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes
• Open Book/ Closed Book: Closed Book