Architecting Secure Cloud

This course has been designed to provide participants with a thorough coverage of the knowledge required for understanding and architecting secure cloud technologies in a way which drives business success.

The advent of Cloud computing services has the capability of redefining the IT landscape as individuals, small to medium enterprises, and large enterprises all consider how the cloud service models can be leveraged to achieve more cost-effective computing. As with any other major advance in technology, security opportunities and risks need to be addressed before the benefits of cloud computing can be safely achieved. There are many issues to consider: compliance and risk management; identity and access management; service availability and integrity; endpoint integrity; and information accessibility and protection should all be explored when architecting systems around cloud computing.

Based on SABSA, the world-leading framework for security architecture, the course provides participants with a comprehensive understanding of how to deliver secure cloud computing. Through a series of innovative presentations, case studies, and workshops, you will develop the knowledge and skills to use the most proven security architecture, design and service management processes in a way which ensures comprehensive end-to-end security of cloud driven systems is achieved.

This course covers the various forms of cloud service (infrastructure as a service, platform as a service, and software as a service) and explores some of the more popular global cloud services. It covers the different deployment models for Cloud and their strengths and weaknesses, and looks at some new security attributes which have emerged from Cloud such as rapid elasticity and service on demand, and addresses the standards that can be applied to these attributes.

Learning outcomes

The top ten competencies developed on this course are:

• Describe the types of Cloud service and deployment models
• Understand how to architect Cloud infrastructures
• Understand how to use the SABSA framework to architect Cloud
• Describe the standard Cloud security models
• Understand how to use attributes to profile Cloud services
• Know the types of threats affecting IaaS, PaaS, and SaaS Clouds
• Understand how to assess risk to security/performance in the Cloud
• Demonstrate how to assess Cloud relevance to Business Needs
• Identify how externally regulated security can be delivered with Cloud
• Analyse enterprise value from Cloud application deployments

Who should attend

This course is of particular significance for anyone planning to migrate to a Cloud infrastructure, to develop Cloud service applications, or to integrate a Cloud service into their business. The Class provides an excellent foundation in Cloud Computing.

Typical attendance would include:

• CIO / CISO / CRO / CIRO
• IT Strategists and Planners
• IT Architects
• IT Development Managers and Project Leaders
• Software Managers and Architects
• Computer / Information Security Managers, Advisors, Consultants & Practitioners
• IT Line Managers
• IT Service Delivery Managers
• Risk Managers
• Internal and External Auditors

Course contents

1. SABSA in Brief

• Understand the key concepts of SABSA
• SABSA Views
• SABSA Matrix
• Attributes that link business to security

2. Defining Cloud

• NIST, CSA, ENISA etc
• How cloud works
• Cloud models
• Cloud characteristics
• Forms of cloud offerings

3. Current Clouds

• Cloud vendor offerings described

4. Using Clouds

• Architecting IaaS
• Developing using PaaS
• Profiling SaaS

5. Cloud Trust & Availability

• CAIQ, CCM, STAR
• Survivability in Clouds

6. Integration and Cloud

• Cloud & IAM
• Cloud Integration Platforms

7. SABSA Cloud Attributes

• Cloud definition of SABSA attributes
• Prioritising attributes for Cloud
• Delivering the Secure Cloud Architecture

8. Summation

Course fees

Course

Fees A$ per person

Architecting Secure Cloud
$ 1600 + gst