6 in-1 enterprise cloud certification training program

Cloud Certification for Enterprise Professionals 1

Concepts, Characteristics

and Roles

Service and Deployment Models

Systems and

Mechanisms

Platform and Infrastructure Architecture

Service Management and Service Delivery

Datacenter Operations

Business Continuity &

Disaster Recovery

Change Management and Incident Response

Governance and Enterprise Risk Management

Legal, Compliance and Audit Management

Interoperability and Portability

Testing and Troubleshooting

Identity, Entitlement and

Access Management

Data Encryption, Audit and Compliance

Secure Platform Management

Secure IT Operations

6-in-1

Enterprise Cloud

Certification

Foundation Technology and Components

Virtualization and

Multitenancy

Storage Systems and Storage Networks

Network Infrastructure and Management


The Enterprise Cloud Opportunity 1

The Enterprise Cloud Opportunity

Enterprise Cloud

Advanced Level

Enterprise

Cloud Trends

! Cloud Platform-as-a-Service (PaaS) will attain a 41% CAGR through 2016, generating 24% of total cloud revenues. Source: the451, 2013

! 44% of IT budgets are spent on cloud computing today, increasing to 51% by 2015. Source: IDG Cloud Computing Survey, 2013

! Gartner estimates the total Public Cloud Services market to be $201B by 2016

! Gartner estimates cloud Infrastructure-as-a-Service (IaaS) to grow at 41.7% per year through 2018

2014 Harvard Business Review Survey Report

! 70% of organizations are using cloud services. ! The cloud has given 74% a competitive advantage. ! 61% say it has increased employee productivity. ! 71% say the cloud reduces complexity within their business. ! 41% named agility as their primary driver for adoption ! 65% say cloud doesn’t adversely affect security. ! 36% say cloud increases security.

Top Cloud Benefits

! Provides a less complex, turnkey IT environment ! Enables maximum application density ! Delivers high levels of availability and scalability ! Accelerates time from development to deployment ! Can be operated by less skilled professionals ! No code changes needed to adopt cloud ! Supports a wide range of infrastructure and programing

frameworks ! Offers attractive business models such as pay per use

Top Use Cases ! Development, user acceptance test,

occasional usage

! Scalability for applications with occasional need for additional compute power

! Storing data in the cloud, allowing recovery when one or multiple copies of a data object are lost

Compelling Business Case ! Flexible pricing

! Dynamic scalability

! No vendor lock-in

Popular Workloads ! Content Management, Portal, CRM, e-

Commerce

! Collaboration: Audio, video, web conferencing & e-mail

! Human Resource Management, ERP, Business Intelligence and Analytics

! Payment Processing & Business Process integration: e.g. Healthcare claims processing

! Internet Application and Infrastructure Hosting, Support and Helpdesk

! Storage (Database & Remote Storage)

! Security (Disaster Recovery)

! Developer Tools


Design Principles and Objectives 1

Design Principles and Objectives

Enterprise Cloud

Advanced Level

Enterprise

Overview The 6-in-1 Enterprise Cloud Certification program combines key topics and concepts from the top 6 vendor neutral certification program into a single program which is designed for organizations seeking to create a competitive advantage with cloud, as well as professionals seeking to enhance their knowledge and career prospects.

Unlike other programs in the marketplace, this program provides ultimate flexibility and choice, preparing participants for 6 vendor neutral industry certifications, supported by an online revision platform, at http://techequity.training

Program Value Proposition

Program Features

! Online assessment at http://techequity.training ! 30 questions for 15 minutes ! Certificate of Achievement

Online Resources ! Videos ! Slides ! Revision Tests

Certification Programs

! CompTIA Cloud+ ! CompTIA Cloud Essentials ! Cloud School Certified

Professional ! Cloud School Certified

Technology Professional ! Cloud School Certified

Cloud Architect ! Cloud Security Alliance,

Certificate for Cloud Security Knowledge

Contact Us

www.techequity.company [email protected]

Trainer Profile

http://vizualize.me/shiyghan

6 Ce rtif ication

Progra ms

Deliv ere d by P ractic i ng E xper ts

Ve ndor Agnostic Concepts

Hi ghly Cu stomizab le

P rogra m

Base d on Indus try Bes t

P ractice s

Supports P rof es sion als Ce rtif ication


Enterprise Cloud Management Demo 1

Enterprise Cloud Management Demo

Cloud Platform Demo

Overview

During the certification training, a vendor neutral, open standards platform is used to demonstrate and reinforce the knowledge gained. The concepts below are illustrated.

Maximum Flexibility & Density

! Platform as Infrastructure (PaaS + IaaS) ! Pattern based configuration and deployment ! Virtual machine virtualization and containers ! Auto-hibernation and de-duplication ! Middleware and programming framework

Elastic & Resilient Architecture

! State management ! Resource replication ! Vertical and horizontal scaling

Innovation through Collaboration

! Collaborative work ! Multiple support groups ! Application marketplace

End-to-End Application Development

! Full application Lifecycle management ! Development environment integration ! One-click-install Marketplace

Advanced Infrastructure Management

! Turnkey self management environment ! Integrated monitoring & auditing ! Zero downtime upgrades ! Fair pricing billing ! How to achieve 50% TCO savings


Certification Programs 1


Enterprise Cloud

Advanced Level

Enterprise

CCSK

The Certificate of Cloud Security Knowledge (CCSK) is the industry’s first user certification for secure cloud computing. The CCSK is designed to ensure that professionals with responsibility for cloud computing have the awareness of the security threats and best practices for securing the cloud.

CloudSchool

A Cloud School Certified Cloud Technology Professional has demonstrated competency in fundamental cloud technology. This certification is an interim accreditation for IT professionals pursuing more specialized certification tracks.

The more advanced Certified Cloud Architect program assesses proficiency in the technology architecture that underlies cloud platforms and cloud-based IT resources and solutions. It demonstrates mastery of the hands-on application of design patterns, principles, and practices used to engineer and evolve cloud environments.

CompTIA & Certified Cloud Technology Associate

The CompTIA Cloud Essentials certification validates knowledge and understanding of the main cloud computing principles and concepts. Certified professionals have demonstrated an understanding of what cloud computing means from a business and technical perspective, as well as what is involved in moving to and governing the cloud. This program has been superseded by the Cloud Credential Council’s Certified Cloud Technology Associate Program.

CompTIA Cloud+ certification certifies that the candidate has the knowledge and skills required to understand standard Cloud terminologies/methodologies, is able to implement, maintain, and deliver cloud technologies and infrastructures, and understands aspects of IT security and use of industry best practices related to cloud implementations and the application of virtualization.


CCSK

CloudSchool

CompTIA

Contact Us

[email protected]


Confidence-Based Learning 1

Confidence-Based Learning

Enterprise Cloud

Advanced Level

Enterprise

Confidence-Based Learning Design Objectives

! Enhance your understanding of cloud best practices ! Learn at your own pace. ! Track your level of understanding ! Track your confidence level ! Leverage proven methods that enhance retention. ! Gain a certification of your choice ! Align learning modules to your role

Classroom training is not sufficient

While many certification providers focus on classroom training only, we support learning beyond the classroom. The http://techequity.training platform uses an innovative “confidence-based” learning methodology to enhance understanding and retention.


The confidence-based learning methodology is a culmination of more than 70 years of academic, commercial, and governmental research into the connection between confidence, correctness, retention, and learning. The first academic paper on the subject was written in 1932 and asserted that measuring confidence and knowledge was a better predictor of performance than measuring knowledge alone, which can be prone to guesswork.

The online platform harnesses a range of tools and capabilities to enhance understanding and retention

The 6-in-1 program is designed by experts with the objective of developing professionals who are uninformed into confident cloud practitioners capable of taking smart actions.


Confidence-Based Learning at techequity.training 1

Confidence-Based Learning at techequity.training

Enterprise Cloud

Advanced Level

Enterprise

Confidence-Based Learning Assessment

With confidence-based learning, the participant is presented with a concept and their feedback is requested. The assessment can be in the form of a statement, a question with multiple options or other more complex assessments such as matching questions.

In providing a response, the participant specifies their confidence level. To score the maximum points, the participant needs to be correct as well as very confident. A penalty is applied where the participant demonstrates a lack of confidence when knowledgeable. An even greater penalty is applied where confidence is demonstrated without competence.

Confidence Learning Report Overtime, confidence based learning not only builds knowledge; it enhances retention and develops professionals who are able to take smart action through mastery of the subject.


http://en.wikipedia.org/wiki/Confidence-based_learning


Cloud Best Practices on YouTube 1

Cloud Best Practices on YouTube

Enterprise IT & Cloud

Advanced Level

Enterprise

Thought Leadership

We recognized that not everyone might be able to enroll on our programs. Through our YouTube channel, supplement our classroom learning, sharing our knowledge with the wider public.

Online Resources

www.techequity.company

http://techequity.training

Contact Us

[email protected]


Sample Program Agenda 1

Sample Program Agenda

Enterprise Cloud

Advanced Level

Enterprise

Program Schedule

The 6-in-1 program is modular and customizable. All sessions are interactive, with time set aside for discussions and product demonstrations to reinforce knowledge and understanding.


Trainer Profile 1

Trainer Profile

Enterprise Cloud

Advanced Level

Enterprise

Program Author

! Dr Shiyghan Emmanuel Navti

Professional Experience

! Cloud Credential Council Ambassador (2 Years) ! IBM Enterprise IT Consultant & Specialist (14 Years) ! IBM Cloud Technical Leader (3 Years) ! IBM Strategy (3 Years)

IT & Business Assignments

! Delivered over 100 IT consulting projects to clients across Europe, Middle East & Africa

! Developed IBM’s expansion strategy for Middle East and Africa

! Led the launched of IBM subsidiaries in Tanzania, Nigeria, Kenya, Ghana, Senegal and Angola

! Led the IBM cloud technical sales team across Europe ! Led the IBM Social Business Europe technical sales

Educational & Professional Qualifications

! Cloud School and Cloud Credential Council Certified Cloud Trainer

! Cloud School Certified Cloud Architect ! Cloud School Certified Cloud Professional ! PhD Computational Modeling ! MSc. Computational Modeling and Finite Elements in

Engineering Mechanics ! BEng. Structural Engineering with Architecture

Professional Client Engagements

www.vizualize.me/shiyghan

Certification Experience

! 1st Certified Trainer for CloudSchool Cloud Architect Certification Program – www.cloudschool.com/certifications/architect

! Developer of the Cloud Credential Council Cloud Architect Certification Program - www.cloudcredential.org/certifications/pca/

! Developer of the “6-in-1” certification based program – http://techequity.company


Trainer Certifications 1

Trainer Certifications

Enterprise Cloud

Advanced Level

Enterprise


Training References 1

Training References

Enterprise Cloud

Advanced Level

Enterprise

Nov 2014 – Mozambique

Sep 2013 – Munich

CEO, “I would like to express that the training achieved the objectives and we hope we can continue in contact” Head of Application Development, “A special thanks for all your patience and for teaching us beyond the program you had for this training” IT Director, “Many thanks for the training and it was a pleasure meeting you”

Certificate Award Ceremony in Maputo

Lunch in Munich

Team Workshop in Nairobi

Fairfax (USA) Partial Group Photo

Facilities in Dubai


Module 1: Foundation Technology 1

Module 1: Foundation Technology

Enterprise Cloud

Advanced Level

Enterprise


Module 2: IT Architecture 1

Module 2: IT Architecture

Enterprise Cloud

Advanced Level

Enterprise


Module 3: Service Management 1

Module 3: Service Management

Enterprise Cloud

Advanced Level

Enterprise


Module 4: Risk Management 1

Module 4: Risk Management

Enterprise Cloud

Advanced Level

Enterprise


Module 6: Enterprise Security 1

Module 6: Enterprise Security

Enterprise Cloud

Advanced Level

Enterprise


Module 1: Foundation Technology and Components 1

Module 1: Foundation Technology and Components

Foundation Technology

Entry Level

Enterprise

Learning Objectives

Understand the basic technologies, capabilities and tools used to deliver enterprise IT and cloud services.

Topics

! Internet components, network and service delivery technologies.

! The characteristics and differences between Internet, Intranet and Extranet.

! Key service delivery capabilities and how they should be delivered.

! Web services technology, service orchestration and implementation.

! Common administration tools. ! Networking tools and technologies.

Evaluation

Online assessment. 30 questions for 15 minutes.

Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+

! CompTIA Cloud Essentials

! Cloud School Certified Cloud Professional

! Cloud School Certified Cloud Architect

Web Site ! http://techequity.training


Module 2: Virtualization and Multitenancy 1

Module 2: Virtualization and Multitenancy


Advanced Level

Enterprise

Learning Objectives

Understand how to create a path to a flexible IT infrastructure with virtualization and multitenancy.

Topics

! The benefits and challenges of virtualization ! How to implement and provision virtual resources ! Implications of storage, network and compute virtualization ! Migration considerations from bare metal to virtualized platform ! Implementing security in a virtualized environment

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+


Web Site

! http://techequity.training


Module 3: Storage Systems and Storage Networks 1

Module 3: Storage Systems and Storage Networks


Advanced Level

Enterprise

Learning Objectives

Understand how to implement storage systems and storage networking best practices

Topics

! The benefits and challenges of storage systems and networks ! Selecting the right storage type and tiering capabilities ! NAS and SAN storage options ! Storage design best practice patterns

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+

Web Site



Module 4: Network Infrastructure and Management 1

Module 4: Network Infrastructure and Management


Advanced Level

Enterprise

Learning Objectives

Understand how to select and implement the right network infrastructure based on best practices

Topics

! Network devices and protocols ! Selecting network deployment topologies and configuration ! Network management options and capabilities ! Network virtualization best practices ! Configuring networks for performance ! Network security best practices.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exams


! CompTIA Cloud+

Web Site



Module 5: Delivery and Deployment Models 1

Module 5: Delivery and Deployment Models

Platform Architecture

Intermediate Level

Enterprise

Learning Objectives

Understand key IT service delivery and deployment models, use cases, roles and responsibilities.

Topics

! Public, private, community, hybrid, virtual private and inter-cloud deployment models, and off-premise and on-premise hosting.

! Deployment model implementation approaches, roles and responsibilities, and use case.

! Infrastructure as a Service, Platform as a Service, Software as a Service, Database as a Service, Communication as a Service, Security as a Service, Anything as a Service models.

! Best practices for service delivery models, roles and responsibilities.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exams


! CompTIA Cloud+




! Cloud Security Alliance, Certificate for Cloud Security Knowledge

Web Site



Module 6: Systems and Mechanisms 1

Module 6: Systems and Mechanisms


Advanced Level

Enterprise

Learning Objectives

Enable the implementation of technology systems capabilities that deliver an efficient IT infrastructure and platform.

Topics ! Isolating IT resources from non-authorized users. ! Fixed-increment storage capacity allocation. ! Addressing data security, integrity and confidentiality concerns. ! Addressing legal and regulatory requirements. ! Controlling bandwidth and network impact. ! Remote development and deployment of services and

applications. ! Usage, service level agreement, audit, pay-per-use monitors. ! Increasing reliability and availability of mission critical IT

resources. ! Improving IT resource allocation and computing capacity. ! Increasing system performance and data availability. ! Enabling access to services via a range of devices.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+




Web Site



Module 7: Infrastructure Architecture 1

Module 7: Infrastructure Architecture


Advanced Level

Enterprise

Learning Objectives

Understand how to implement proven best practice based architectures for delivering an elastic and resilient system infrastructure.

Topics

! Improving I/O performance in a virtualized environment. ! Minimizing redundant copies of data. ! Dynamically avoiding network bottlenecks. ! Vertically scaling requests between storage devices. ! Optimizing the availability of different disk types. ! Avoiding slow data transfers and data loss. ! Accessing IT resources, even when the path is lost. ! Enabling resource connectivity to be highly available. ! Minimizing maintenance downtime.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam




Web Site



Module 8: Platform Architecture 1

Module 8: Platform Architecture


Advanced Level

Enterprise

Learning Objectives

Understand how to implement best practices architectures for delivering an elastic and resilient application platform.

Topics ! IT resource pools for increased redundancy and scalability. ! Scaling conditions for dynamic resource allocation. ! Load balancing algorithms to optimize resource utilization. ! Flexible scaling architecture to meet high usage demands. ! Billing service consumers for actual resource usage. ! Remote management for bare-metal servers. ! Avoiding manual provisioning in deployments. ! Mitigate network connectivity issues, controller or hardware failures ! Mitigate security breaches. ! Mitigating the failure of a hypervisor on virtual servers. ! Avoiding service unavailability due to maintenance. ! Eliminating physical server single point of failure.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam

Certification Resources

! CompTIA Cloud+


Web Site



Module 9: Service Management and Service Delivery 1

Module 9: Service Management and Service Delivery

Service Management

Advanced Level

Enterprise

Learning Objectives

Understand best practices for assessing provider viability, defining quality of services and managing service level agreements.

Topics

! Key service delivery and management concepts. ! Compute resources needed for the delivery of virtual machines. ! Assessing IT service provider viability. ! Components and structure of a service contract. ! Information classification and information management policy. ! Monitoring in an on-premise or off-premise IT environment. ! Planning for future resource utilization. ! Sunk, upfront, on-going, capital, integration and locked-in costs. ! Discuss cost metrics and management considerations. ! Usage and pricing metrics (template formulation and alignment). ! Understand the characteristics of a billing system. ! Critical components and considerations for SLA management.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam



! CompTIA Cloud+


Web Site



Module 10: Datacenter Operations 1

Module 10: Datacenter Operations

Service Management

Advanced Level

Enterprise

Learning Objectives

Understand how to implement key datacenter operations, maintenance and secure datacenter design best practices.

Topics

! Datacenter selection considerations. ! Multiple location datacenter considerations. ! Datacenter compliance requirements. ! Datacenter management processes, practices and management. ! Considerations for applications with regulated information. ! Virtual datacenter considerations. ! Key datacenter facility, equipment and power requirements. ! Datacenter equipment maintenance and support systems. ! Datacenter resiliency requirements and implementation. ! Best practices for datacenter virtual, physical and human security.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam




Web Site



Module 11: Business Continuity and Disaster Recovery 1

Module 11: Business Continuity and Disaster Recovery

Service Management

Advanced Level

Enterprise

Learning Objectives

Understand key system, business processes and capabilities needed to ensure continuous business operations, along with the ability to recover from a disaster with minimal impact on the business.

Topics

! The need for business continuity planning. ! Organizational structure, roles and responsibilities. ! Recovery process and documentation best practices. ! Provider assessment guidelines for ensuring business continuity. ! Business continuity requirements for mission critical systems. ! Common methods for ensuring sufficient system redundancy. ! Disaster Recovery Plan key considerations. ! Disaster Recovery Metrics useful in developing a DRP. ! Image capture and backup for disaster recovery. ! Disaster recovery tooling requirements.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+


Web Site



Module 12: Change Management and Incident Response 1

Module 12: Change Management and Incident Response

Service Management

Advanced Level

Enterprise

Learning Objectives

Understand design and implement guidelines for incident response, lifecycle, change, capacity and configuration management.

Topics

! Lifecycle, capacity, configuration, change management and change management best practices.

! Developing a strategy, plan, and defining stages and goals. ! Best practices for effective incident management and response. ! Unique considerations for cloud deployment. ! Roles and responsibilities. ! Monitoring, logging, reporting and data analysis requirements. ! Testing requirements. ! Impact of virtualization and resource pooling. ! Provider assessment, SLA definition and contracting

requirements. ! The need for documentation at every step of the life cycle. ! Maintenance window best practices. ! Benefits of standardization.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+


Web Site



Module 13: Enterprise Risk Management 1

Module 13: Enterprise Risk Management

Enterprise Risk Management

Advanced Level

Enterprise

Learning Objectives

Understand risks, identify compromise risks and vulnerabilities, and implement best practices for risk management.

Topics

! Facets of organizational risk, how to identify exposure, define scenarios and risk tolerance.

! Best practices for securing organizational commitment, define risk management process and focus on outcomes.

! Defining the provider risk metrics and methods of assessing third-party vendor risk and other critical risks.

! Identifying and quantifying risks associated with physical asset. ! Risks associated with identity, access management and

encryption. ! Networking, physical and virtual compute infrastructure risks. ! Denial of Service related risks. ! Governance, compliance, legal, and contractual related risks. ! Third-party provider and vendor lock-in related risks. ! Risks introduced by emerging business models such as cloud. ! Compliance and information security governance requirements. ! Governance roles and best practices for implementing a

governance process. ! Enterprise Risk Management framework characteristics,

responses and outcomes.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam



Web Site



Module 14: Legal, Compliance and Audit Management 1

Module 14: Legal, Compliance and Audit Management


Advanced Level

Enterprise

Learning Objectives

Understand compliance, audit, regulation, data management and provider contracting best practices.

Topics

! The need for regulation, and how to ensure protect against unregulated areas.

! Security and assurance services to ensure compliance. ! Compliance in emerging business models such as cloud. ! Audit and compliance data considerations. ! Typical sources of information for data protection requirements. ! Data roles and responsibilities. ! Recommended practices for ensuring data access. ! Addressing data jurisdiction challenges. ! Merits of ensuring appropriate data discovery capabilities ! Typical data preservation and compliance requirements ! Legal considerations for service delivery and data compliance. ! Third-party provider selection recommended practices. ! Ensuring compliance with third-party service providers. ! Negotiating and enforcing service provider contracts. ! Service provisioning contract structure for ensuring compliance. ! Knowing when to change providers. ! Recommended auditing practices.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam



Web Site



Module 15: Interoperability and Portability 1

Module 15: Interoperability and Portability


Advanced Level

Enterprise

Learning Objectives

Understand the need for interoperability and portability, and best practices for avoiding vendor lock-in.

Topics

! The need for interoperability and portability. ! Recommended practices for ensuring interoperability and

portability for application, platform and infrastructure services. ! Security challenges and requirements. ! Benefit of Open APIs. ! Migration considerations.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam



Web Site



Module 16: Testing and Troubleshooting 1

Module 16: Testing and Troubleshooting


Advanced Level

Enterprise

Learning Objectives

Understand testing and troubleshooting best practices.

Topics

! The impact of emerging business models on testing. ! Data access requirements for conducting testing. ! Testing documentation best practices. ! Network testing recommended practices. ! Availability testing recommended process. ! System and application performance testing. ! Security testing recommended practices. ! Compliance testing recommended practices. ! Configuration testing recommended practices.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam


! CompTIA Cloud+

Web Site



Module 17: Identity, Entitlement and Access Management 1

Module 17: Identity, Entitlement and Access Management

Security

Advanced Level

Enterprise

Learning Objectives

Understand and implement best practices for identity, entitlement and access management in an on-premise and cloud environment.

Topics

! Identity and Enterprise Access Management (IdEA) concepts. ! Multi-system IdEA integration and federation consideration. ! IdEA implementation requirements and key considerations. ! Identity and attribute governance. ! Application design requirements for IdEA. ! Identity consumerization. ! Effective identity and access management administration. ! IdEA in a cloud business model. ! Best practices for identity migration. ! The merits and key capabilities needed from Identity as a Service. ! Identity entitlement process, best practices and automation

thereof. ! Best practices for building trust with identity and attributes.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam



Web Site ! http://techequity.training


Module 18: Encryption and Key Management 1

Module 18: Encryption and Key Management

Security

Advanced Level

Enterprise

Learning Objectives

Understand data protection risks, compliance requirements and guidelines for encryption and key management.

Topics

! Key encryption concepts, capabilities and operational practices for securing data with encryption.

! Encryption and cryptography within the context of emerging business models such as cloud.

! Alternatives to encryption, and where they might be useful. ! Best practices for encrypting data in databases. ! Recommended practices for encryption key management and

storage from a provider and consumer perspective. ! The motivation and considerations for hardware encryption. ! Scaling Certificate Authorities and key revocation. ! Key characteristics of Encryption as a Service. ! Recommended practices for secure and effective data deletion. ! Data leak risks and mitigating actions. ! Considerations for data protection in large scale systems. ! Practices for dispute resolution. ! Storage and management of personal data. ! Data Loss Prevention services. ! Data Dispersion to enhance data availability and assurance. ! Auditing and demonstrating compliance. ! Common threats and mitigating actions. ! Infrastructure and application compliance building blocks. ! Best practices for intrusion detection and prevention.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exams



! Cloud School, Cloud Architect Certification

Web Site



Module 19: Secure Platform Management 1

Module 19: Secure Platform Management

Security

Advanced Level

Enterprise

Learning Objectives

Understand how to securing IT infrastructure, platform and applications.

Topics

• Authentication options within the enterprise. • Federated authentication, two-factor authentication and single-

sign-on considerations. • Implementing and managing authorization, and enforcing

entitlement based on policies. • Interfacing with the Policy Decision Point and Policy Enforcement

Point for authorization. • Access control, access policy management, and attribute based

authorization. • Common infrastructure vulnerabilities and best practices for

hardening infrastructure components. • Security services implementation in large scale, multi-user, multi-

provider environment. • Implementing automated resource provisioning capabilities. • Infrastructure provider selection considerations. • Application platform security roles and responsibilities. • Restricting customer data to enterprise users and applications. • Web security capabilities and secure application design

principles. • Secure software development lifecycle and code review practices. • Recommended practices for software assurance. • Identity and attribute provisioning lifecycle management. • Web application penetration testing. • Interoperability testing and implementation best practices.

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam




Module 20: Secure IT Operations 1

Module 20: Secure IT Operations

Security

Advanced Level

Enterprise

Learning Objectives

Understand key roles, responsibilities and liabilities in an IT environment, including best practices for building trust.

Topics ! Assigning security responsibilities and liability implications. ! Implementation best practices for IT service delivery models. ! Identifying and on-boarding personnel. ! Considerations for storing and managing sensitive data. ! Security training recommendations. ! Security access management review. ! Contract and SLA negotiation. ! Disclosure risks. ! Change control procedure and policy risks. ! Remote and physical access control policies. ! Documentation requirements. ! Reducing risk with staging environment. ! Host, network and application controls. ! Policies and procedures for backup and storage. ! Use of security certification. ! Return on security investments (ROSI) ! Effects of different forms of reporting breaches on security ! Increasing transparency while maintaining appropriate levels of

security ! Environmental controls, power and maintenance considerations ! Inventory management. ! Networking security and storage media destruction. ! Security audit and compliance. ! Security as a Service (SecaaS) benefits, challenges and adoption

practices. ! Security as Service intrusion detection requirements ! Security Information and Event Management (SIEM) systems

SecaaS requirements

Evaluation


Online Resources

! Videos

! Slides

! Revision Exam

