Building a Cloud Security Program

Course details

Cloud is one of the most important recent changes in technology, and it saw exponential adoption through COVID. In this course, CISO and cloud security expert Ashish Rajan explains how you can address cloud security risks and challenges appropriately. Build your understanding of the cloud landscape. Go over best practices to help you succeed with a cloud security program. Explore the foundational components of an effective cloud security program. Plus, get practical, actionable advice on where to start your cloud security program. This course is intended for Chief Information Security Officers (CISOs), Directors, or VPs of Cloud who are starting to build a cloud security program. The course will help you identify the big rocks that will be the foundation of your cloud security program.

Concepts

0. Introduction

01 - Building a cloud security program

1. Understand the Cloud Landscape

02 - ChatGPT - Cloud security program
03 - Before you start, you should know this
04 - Cloud fundamentals for leaders
05 - Cloud security fundamentals for leaders
06 - Advanced shared responsibility - Supply chain and cloud service provider

2. Formula for Success with a Cloud Security Program

07 - Traditional security vs. cloud security
08 - Cloud native vs. cloud-first approach vs. on-premises approach
09 - Automation with context
10 - Shift left to manage the right of your development lifecycle

3. Foundation Components of the Cloud Security Program

11 - Identity and access management
12 - Data security and governance
13 - Asset management
14 - Product security - Infrastructure and AppDev security
15 - Governance, risk, and compliance
16 - Threat management and security assurance

4. Where to Start Your Cloud Security Program

17 - Pick the cloud service provider
18 - Crown jewels first
19 - IAM for data in the cloud
20 - Cloud security standards and policies for speed
21 - Security champions for the cloud - Inside and outside security

Conclusion

22 - Find business and engineering allies
23 - Next steps