Navigate SOC 2 Compliance in the Cloud
34mIntermediate2024-08-22
Authors

AJ Yawn
Cybersecurity Expert, Founder and CEO at ByteChek

Jerich Beason
Chief Information Security Officer, Podcast Host, Speaker
Course details
This strategic course designed specifically for security professionals working with and for cloud-hosted companies takes a deep dive into SOC 2 compliance, a crucial standard for security and trust in cloud services. This course with instructors Jerich Beason and AJ Yawn is structured into chapters that focus on different aspects of SOC 2 compliance. Learn about SOC 2 concepts from both auditor and CISO perspectives, understand the unique impact of SOC 2 in cloud environments, hear key strategies for effective compliance, and more.
Learning objectives
Grasp the fundamental concepts of SOC 2 compliance, especially as they apply to cloud-hosted environments.
Develop strategies for effective SOC 2 compliance and communicate these requirements efficiently within their organization.
Recognize specific risks associated with cloud environments and learn how to mitigate them in line with SOC 2 standards.
Apply the learned concepts to enhance the security and trustworthiness of their cloud systems and services.
Learning objectives
Grasp the fundamental concepts of SOC 2 compliance, especially as they apply to cloud-hosted environments.
Develop strategies for effective SOC 2 compliance and communicate these requirements efficiently within their organization.
Recognize specific risks associated with cloud environments and learn how to mitigate them in line with SOC 2 standards.
Apply the learned concepts to enhance the security and trustworthiness of their cloud systems and services.
Skills covered
Governance, Risk, and ComplianceCybersecurityOne-Off
Concepts
0. Introduction
- 01 - SOC 2 - Insights from an auditor and a CISO
- 02 - Why SOC 2 matters - Unpack its impact on your business
1. Unraveling Logical Access in the Cloud for SOC 2
- 03 - IAM - Balancing access and security in SOC2
- 04 - Securing the cloud network - Checkpoints vs. strategy
- 05 - The art of data encryption - Data protection
- 06 - Bridge audit requirements and technical reality
2. Navigating Change Management in the Cloud
- 07 - Change management - Auditor queries and CISO responses
- 08 - Adapting SDLC for the cloud - A compliance perspective
- 09 - Proving change management to auditors - Inside tips
- 10 - Change management - Expectations vs. execution
3. Addressing Vulnerability and Incident Response
- 11 - Auditor's viewpoint vs. CISO's challenges
- 12 - Pen testing - From audit compliance to real-world scenarios
4. Ensuring High Availability in Cloud Environments
- 13 - Fundamentals of cloud availability
- 14 - Fundamentals of cloud availability
- 15 - Leveraging Multi-AZ for optimal availability
Conclusion
- 16 - Cloud SOC 2 resources
Related courses
- SOC 2 Compliance Essential Training
- Program Management for Cybersecurity Managers: From Planning to Cross-Functional Coordination
- Navigating the EU Cyber Resilience Act
- Cybersecurity Compliance and Regulatory Essentials for GRC Analysts
- Hands-on AI: Next-Gen Security and GRC Automation with MCP
- Building a Multicloud Security Program: Strategy, Implementation, and Emerging Trends
- Navigating AI Regulations: A Business Guide to Risk, Responsibility, and Strategy
- DORA Requirements and AI Security: From Compliance to Threat Intelligence