Cloud Security Essentials (CSE)

Cloud Computing and Security Fundamentals

• Cloud Computing Types and Service Models
• Cloud Security Challenges and Concerns
• Cloud and Security Responsibility
• Evaluating Cloud Service Providers
• Cloud Security Benefits
• Threats and Attacks in Cloud Environments
• Cloud Security Design Principles
• Cloud Security Architecture

Identity and Access Management (IAM) in the Cloud

• IAM Fundamentals
• Principal and Roles of IAM in the Cloud
• Role-based Access Control (RBAC)
• Identity Federation
• Single Sign-on (SSO) and Self-Service Password Reset (SSPR)
• Multifactor Authentication (MFA)
• Principle of Least Privilege
• IAM Auditing and Monitoring

Data Protection and Encryption in the Cloud

• Data Classification and Lifecycle
• Encryption Techniques (at Rest, in Transit)
• Customer vs. Cloud Provider Managed Keys
• Data Loss Prevention (DLP)
• Backup and Disaster Recovery Strategies

Network Security in the Cloud

• Cloud Network Fundamentals
• Virtual Private Clouds (VPC)
• Network Isolation and Segmentation
• Network Access Control Lists (NACLs) and Network Security Groups (NSG)
• Remote Access and Connections
• Firewalls and Intrusion Detection

Application Security in the Cloud

• Secure Software Development Lifecycle (SDLC) in the Cloud
• Web Application Firewall (WAF) in Cloud Environments
• Web Application Security and OWASP Top Ten
• Security by Design Principles for Cloud Applications
• Secure Coding Practices
• API Security and Integration Best Practices
• Serverless Security Considerations
• Container Security (Docker, Kubernetes)

Cloud Security Monitoring and Incident Response

• Cloud Logging
• Cloud Security Monitoring
• SIEM and SOAR
• Cloud-native Monitoring Solutions
• Continuous Security Monitoring Strategies
• Cloud Security Monitoring Best Practices

Cloud Security Risk Assessment and Management

• Identifying Cloud Security Risks
• Risk Assessment Frameworks for Cloud Environments
• Cloud Security Controls and Countermeasures
• Threat Modeling and Vulnerability Assessment in Cloud Environments
• Quantitative vs. Qualitative Risk Assessment Approaches
• Cloud Risk Treatment, Response, and Mitigation

Cloud Compliance and Governance

• Identifying Cloud Security Risks
• Risk Assessment Frameworks for Cloud Environments
• Cloud Security Controls and Countermeasures
• Threat Modeling and Vulnerability Assessment in Cloud Environments
• Quantitative vs. Qualitative Risk Assessment Approaches
• Cloud Risk Treatment, Response, and Mitigation

keine

• Administratoren
• Cloud Administratoren
• Cloud Architekten