Cloud Security ISO/IEC 27017 and ISO/IEC 27018 (Implementer level) Course

Cloud Security ISO/IEC 27017 and ISO/IEC 27018 (Implementer level) Course

550,00 € iva esclusa

A 16-hour course based on ISO/IEC 27017 and ISO/IEC 27018, focused on implementing cloud controls within the Information Security Management System, from the allocation of responsibilities to managing contracts, personal data and incidents. Delivered live with exercises on operational templates, it prepares cloud security managers, IT security professionals, consultants and ISMS teams to apply the controls in a real cloud environment, and includes an optional final assessment leading to a qualification certificate.

Description

The Cloud Security ISO/IEC 27017 and ISO/IEC 27018 course (Implementer level) provides the information needed to implement the cloud controls of ISO/IEC 27017 and ISO/IEC 27018 within the Information Security Management System (ISMS): from the allocation of responsibilities through to managing contracts, personally identifiable information (PII) and incidents.

Taught by Dott.ssa Valentina Grazia Sapuppo, the course is delivered live, online or in person, and combines methodology with hands-on exercises on operational templates, guiding you step by step through applying the controls in a real cloud environment.

16
Hours
10
Modules
2
Lessons
Live
Synchronous
Course information
Instructor
Dott.ssa Valentina Grazia Sapuppo
Level
Implementer
Training area
ICT
Delivery
Synchronous, online or in person
Schedule
Shared upon enrolment
Participants
Classes from 6 up to 16 participants
Who it is for
  • Cloud security managers
  • IT security professionals
  • Consultants
  • ISMS team members
Objectives and expected outcomes

The course builds the skills needed to implement the cloud controls of ISO/IEC 27017 and ISO/IEC 27018 within the ISMS, from the allocation of responsibilities to managing contracts, PII and incidents.

By the end of the course, participants will:

  • be able to extend the ISMS to cloud services, defining how responsibilities are allocated between customer and provider;
  • know how to implement the additional controls of ISO/IEC 27017 and the PII protection measures of ISO/IEC 27018;
  • know how to manage contracts and SLAs with cloud providers, monitoring, incidents and compliance checks;
  • work on operational templates (registers, checklists, procedures) they can use as a basis for their own system.

Main topics

ā—Cloud security ā—ISO/IEC 27017 and ISO/IEC 27018
ā—Extending the ISMS to the cloud ā—Personal data (PII)
ā—Contracts and SLAs ā—Incident management

Course programme

01 The cloud ecosystem and allocation of responsibilities
02 Extending the ISMS to cloud services
03 Additional ISO/IEC 27017 controls
04 Configuration and hardening of cloud environments
05 Protection of personal data (PII) in the cloud according to ISO/IEC 27018
06 Managing contracts and SLAs with cloud providers
07 Monitoring, logging and cloud incident management
08 Cloud audit and compliance verification
09 Exercises
10 Final assessment (optional)
Prerequisites

Knowledge of ISO/IEC 27001 at Foundation level. No previous experience, preparatory courses or specific digital skills are required.

Methodology and materials

Live lessons
Two 8-hour live sessions with the instructor.
Exercises
Practical activities on operational templates to apply the content straight away.
Downloadable materials
Slides and cards, operational templates (registers, checklists, procedures).
Assessment
Optional final learning assessment.

Certificate of attendance

A certificate of attendance is issued at the end of the course. Participants who take and pass the optional final assessment also receive an Implementer Cloud Security ISO/IEC 27017 and ISO/IEC 27018 qualification certificate issued by Cop.Academy.

Note: the final assessment is an internal qualification test and does not fall under personnel competence assessment schemes according to ISO/IEC 17024.