SEC545: Cloud Security Architecture and Operations

As more organizations move data and infrastructure to the cloud, security is becoming a major priority. Operations and development teams are finding new uses for cloud services, and executives are eager to save money and gain new capabilities and operational efficiency by using these services. But will information security prove to be an Achilles’ heel? Many cloud providers do not provide detailed control information about their internal environments, and quite a few common security controls used internally may not translate directly to the public cloud.

SEC545: Cloud Security Architecture and Operations will tackle these issues one by one. We’ll start with a brief introduction to cloud security fundamentals, then cover the critical concepts of cloud policy and governance for security professionals. For the rest of day one and all of day two, we’ll move into technical security principles and controls for all major cloud types (SaaS, PaaS, and IaaS). We’ll learn about the Cloud Security Alliance framework for cloud control areas, then delve into assessing risk for cloud services, looking specifically at technical areas that need to be addressed.

You Will Be Able To

• Revise and build internal policies to ensure cloud security is properly addressed
• Understand all major facets of cloud risk, including threats, vulnerabilities, and impact
• Articulate the key security topics and risks associated with SaaS, PaaS, and IaaS cloud deployment models
• Evaluate Cloud Access Security Brokers (CASBs) to better protect and monitor SaaS deployments
• Build security for all layers of a hybrid cloud environment, starting with hypervisors and working to application layer controls
• Evaluate basic virtualization hypervisor security controls
• Design and implement network security access controls and monitoring capabilities in a public cloud environment
• Design a hybrid cloud network architecture that includes IPSec tunnels
• Integrate cloud identity and access management (IAM) into security architecture
• Evaluate and implement various cloud encryption types and formats
• Develop multi-tier cloud architectures in a Virtual Private Cloud (VPC), using subnets, availability zones, gateways, and NAT
• Integrate security into DevOps teams, effectively creating a DevSecOps team structure
• Build automated deployment workflows using Amazon Web Services and native tools
• Incorporate vulnerability management, scanning, and penetration testing into cloud environment

Who Should Attend

• Security architects
• Senior security engineers
• Technical security managers
• Security Operations Center (SOC) analysts, engineers, and managers
• CND analysts
• Individuals working to implement Continuous Diagnostics and Mitigation (CDM), Continuous Security Monitoring (CSM), or Network Security Monitoring (NSM)