Information Security Controls For Cloud Services Course | ISO 27017 - in Rua António Heitor

ISO 27017 Information Security Controls for Cloud Services Course Outline

Module 1: Introduction

• Scope

Module 2: Normative references

• Identical Recommendations | International Standards
• Additional References

Module 3: Definitions and abbreviations

• Terms defined elsewhere
• Abbreviations

Module 4: Cloud sector-specific concepts

• Overview
• Supplier relationships in cloud services
• Relationships between cloud service customers and cloud service providers
• Managing information security risks in cloud services
• Structure of this standard

Module 5: Information security policies

• Management direction for information security

Module 6: Organisation of information security

• Internal organisation
• Mobile devices and teleworking

Module7: Human resource security

• Prior to employment
• During employment
• Termination and change of employment

Module 8: Asset management

• Responsibility for assets
• Information classification
• Media handling

Module 9: Access control

• Business requirements of access control
• User access management
• User responsibilities
• System and application access control

Module 10: Cryptography

• Cryptographic controls

Module 11: Physical and environmental security

• Secure areas
• Equipment

Module 12: Operations security

• Operational procedures and responsibilities
• Protection from malware
• Backup
• Logging and monitoring
• Control of operational software
• Technical vulnerability management
• Information systems audit considerations

Module 13: Communications security

• Network security management
• Information transfer

Module 14: System acquisition, development and maintenance

• Security requirements of information systems
• Security in development and support processes
• Test data

Module 15: Supplier relationships

• Information security in supplier relationships
• Supplier service delivery management

Module 16: Information security incident management

• Management of information

Module 17: Information security aspects of business continuity management

• Information security continuity
• Redundancies

Module 18: Compliance

• Compliance with legal and contractual requirements
• Information security reviews

Who should attend this ISO 27017 Information Security Controls for Cloud Services Course?

The ISO 27017 Information Security Controls for Cloud Services Training Course provides professionals with an understanding of information security controls specifically tailored for cloud computing environments. This course can be beneficial for a variety of professionals, including:

• Cloud Security Managers
• Information Security Managers
• IT Managers and Professionals
• Risk Management Professionals
• Auditors
• Security Consultants
• Compliance Officers

Prerequisites of the ISO 27017 Information Security Controls for Cloud Services Course

There are no formal prerequisites for this ISO 27017 Information Security Controls for Cloud Services Training Course.

ISO 27017 Information Security Controls for Cloud Services Course Overview

ISO 27017 is a set of guidelines and controls specifically designed for securing Cloud Services, building upon the ISO 27002 standard. These controls focus on cloud-specific risks and provide a robust framework for organisations to safeguard their cloud-based environments, ensuring the confidentiality, integrity, and availability of data. This standard is crucial for both cloud service providers and users, facilitating a secure and trustworthy cloud ecosystem.

Proficiency in ISO 27017 is vital for Information Security Managers, Cloud Security Engineers, Compliance Officers, and IT Auditors. Mastering this standard enables professionals to implement comprehensive cloud security measures, conduct risk assessments, and ensure compliance with regulatory requirements. It is essential for those aiming to enhance their organisation's cloud security posture and protect sensitive information in cloud environments.

This intensive 2-day course equips delegates with fundamental concepts and practical skills in implementing ISO 27017 controls. Through hands-on workshops and expert-led sessions, delegates comprehensively understand cloud-specific security threats, risk management strategies, and the application of ISO 27017 controls. Delegates learn to develop cloud security policies, perform audits, and implement best practices to secure Cloud Services.

Course Objectives

• To understand the foundational principles of ISO 27017 and its relevance to cloud security
• To explore various cloud-specific security threats and risk management strategies
• To apply ISO 27017 controls in real-world cloud environments
• To develop and implement cloud security policies and procedures
• To perform audits and assessments to ensure compliance with ISO 27017
• To comprehend ethical considerations in cloud security management

Upon completing this course, delegates will have acquired the knowledge and skills necessary to implement and manage ISO 27017 controls effectively, making them invaluable assets in ensuring the security of Cloud Services within their organisations.

What’s included in this ISO 27017 Information Security Controls for Cloud Services Course?

• ISO 27017 Information Security Controls for Cloud Services Examination
• World-Class Training Sessions from Experienced Instructors
• ISO 27017 Information Security Controls for Cloud Services Certificate
• Digital Delegate Pack

ISO 27017 Information Security Controls for Cloud Service Exam

To achieve the ISO 27017 Information Security Controls for Cloud Services, candidates will need to sit for an examination. The exam format is as follows: 

• Question Type: Multiple Choice  
• Total Questions: 30 
• Total Marks: 30 Marks 
• Pass Mark: 50%, or 15/30 Marks 
• Duration: 40 Minutes
• Open Book/ Closed Book: Closed Book