Cloud System Architecture – Concepts and Design


Overview/Description
Target Audience
Prerequisites
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description
Cloud services vary in size and complexity, and the deployed architecture impacts directly on service and data asset security. This course describes and explores aspects of cloud computing architectural design, and defines associated cloud systems and cloud components. In addition to Cloud Reference Architecture, the course outlines definitions and roles, computing characteristics, and cloud deployment models. In this course, you will learn about cloud security, cloud networks, virtualization within the cloud system, data encryption and aspects of cloud interoperability, trusted cloud services, cloud system management, and operational considerations. The course covers the essential topics for the ICS2's Certified Cloud Security Professional examination – Domain 1 requirements.

Target Audience
This course is intended for IT professionals including managers, engineers, and technical staff intending to take the CCSP examination.

Prerequisites
None

Expected Duration (hours)
2.2

Lesson Objectives

Cloud System Architecture – Concepts and Design

  • start the course
  • define and describe cloud components
  • define cloud system participants: consumers, providers, partners, auditors, regulators
  • outline the operational characteristics of cloud computing
  • outline the supporting architectural components and infrastructure of cloud computing
  • detail Cloud Computing Activities with reference to ISO/IEC 17789, Clause 9
  • define how cloud services are categorized based on supported services and capabilities
  • describe the industry-defined standard categories of cloud computing
  • describe the defined deployment models of the cloud services
  • describe the additional operational aspects of the cloud service environment
  • describe the encryption of cloud-hosted assets
  • define access and access control to cloud-hosted assets (data, files, and resources)
  • outline asset and media management with respect to deletion/removal/overwrite on a cloud platform
  • define issues and solutions relating to cloud network structures
  • define issues and solutions relating to cloud virtualization infrastructures
  • list and describe known and common threats to cloud infrastructure and data assets
  • define security considerations and responsibilities on a per Cloud Model (Category basis – IaaS, PaaS, and SaaS plus their various derivatives)
  • detail the security-based data life cycle of cloud-hosted assets (data, files, features)
  • describe business continuity and disaster recovery as it applies to a cloud service
  • define how a cloud deployment might be analyzed on a cost basis
  • define and describe focus areas relating to the functional security of the cloud service including vendor lock-in, interoperability, portability, migration, etc.
  • describe methodologies for mapping cloud service requirements to service provider certification and product certifications
  • outline methodologies for mapping cloud components to appropriate or required industry certifications or industry standards
  • define Cloud Service roles, categories, and services; describe data state and data asset classification with reference to security; and outline the purpose of Common Criteria
  • Course Number:
    cl_csip_a01_it_enus

    Expertise Level
    Intermediate