Strategies for Cloud Security Risk Management

This course is part of Google Cloud Cybersecurity Professional Certificate

Instructor: Google Cloud Training

Access provided by Abu Dhabi National Oil Company

7,603 already enrolled

4 modules

Gain insight into a topic and learn the fundamentals.

76 reviews

Beginner level

No prior experience required

Flexible schedule

2 weeks at 10 hours a week

Learn at your own pace

95%

Most learners liked this course

4 modules

Gain insight into a topic and learn the fundamentals.

76 reviews

Beginner level

No prior experience required

Flexible schedule

2 weeks at 10 hours a week

Learn at your own pace

95%

Most learners liked this course

What you'll learn

Analyze the key components and objects of the risk management process.
Explore cloud security risk frameworks.

Skills you'll gain

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

23 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Cloud Computing expertise

This course is part of the Google Cloud Cybersecurity Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Google Cloud

There are 4 modules in this course

Ready for more?! This is the second course of the Google Cloud Cybersecurity Certificate. Crack the code of security and compliance! ️ This course is your decoder ring to unlock the world of security domains, frameworks, and data privacy. Discover the secret language of risk, controls, and the trio of compliance: people, process, and tech!

In this module, you’ll dive into the essential concepts of security domains, compliance frameworks, data privacy fundamentals, risk and security controls. You'll discover the key differences between security and compliance, and learn about controls and frameworks within the three pivotal areas of compliance: people, process, and technology. Explore risk and security controls in depth, giving you a clear view of how these controls are effectively implemented.

What's included

13 videos10 readings5 assignments

13 videos Total 34 minutes

Introduction to Course 2 3 minutes
Preston: Continuous growth in cloud security 1 minute
Welcome to module 1 1 minute
Introduction to cloud security domains 5 minutes
Explore compliance and security 4 minutes
Phil: A day in the life of a Chief Information Security Officer 3 minutes
Security controls and compliance 2 minutes
Risk and compliance 4 minutes
The three areas of compliance: People, process, and technology 3 minutes
Overview of the Google Cloud Security Command Center 2 minutes
Cloud security controls 3 minutes
Explore steps to implement security controls 3 minutes
Wrap-up 1 minute

10 readings Total 100 minutes

Course 2 overview 10 minutes
Helpful resources and tips 10 minutes
Lab technical tips 10 minutes
Explore your course 2 scenario: Cymbal Bank 10 minutes
Learn more about security and compliance with Google whitepapers 10 minutes
Learn more about security controls 10 minutes
Use existing frameworks to demonstrate compliance 10 minutes
Control mapping for risk management 10 minutes
Security control implementation 10 minutes
Glossary terms from module 1 10 minutes

5 assignments Total 82 minutes

Test your knowledge: Security domains and compliance 8 minutes
Test your knowledge: Risk, security controls, and compliance 8 minutes
Test your knowledge: Compliance and risk management 8 minutes
Test your knowledge: Security control mapping and implementation 8 minutes
Module 1 challenge 50 minutes

Get ready to level up your risk management game! In this module, you'll crack the code on popular frameworks like NIST CSF, SOC 2, FedRAMP, HIPAA, and ISO 27001. You'll compare and contrast these frameworks like superheroes in a face-off, so you can pick the perfect one for any situation. Plus, you'll learn how to use them to build your own fortress of security, keeping your data safe and sound. So, buckle up and get ready for an epic adventure in risk management proficiency.

What's included

9 videos7 readings5 assignments

9 videos Total 24 minutes

Welcome to module 2 1 minute
MK: Risk management in a cloud-first world 2 minutes
Introduction to risk management frameworks 3 minutes
Data protection and privacy 3 minutes
Data protection and privacy scenarios 4 minutes
Industry-specific regulations and standards 3 minutes
Apply industry-specific requirements 2 minutes
Risk management industry standards 4 minutes
Wrap-up 1 minute

7 readings Total 62 minutes

Risk management and security frameworks 10 minutes
Compare and contrast risk management frameworks 10 minutes
Google’s Secure AI Framework 10 minutes
Learn more about data protection and privacy regulations 10 minutes
Security frameworks, regulations, laws, and standards 10 minutes
What is Google Cloud Risk Manager? 10 minutes
Glossary terms from module 2 2 minutes

5 assignments Total 82 minutes

Test your knowledge: Risk management frameworks 10 minutes
Test your knowledge: Data protection and privacy regulations 8 minutes
Test your knowledge: Differences between and applications of industry regulations 8 minutes
Test your knowledge: Industry standards 6 minutes
Module 2 challenge 50 minutes

In this module, you'll unlock the secrets of the compliance lifecycle. Imagine it as a labyrinth of rules and regulations – you'll learn how to map your path through controls, dodge the pitfalls of non-compliance, and perform audits like a seasoned adventurer. Discover how Policy-as-Code (PaC) can weave powerful safeguards directly into your Infrastructure-as-Code (IaC), transforming it into a self-defending fortress.

What's included

12 videos9 readings7 assignments

12 videos Total 36 minutes

Welcome to module 3 1 minute
Bill: Use a security mindset 3 minutes
Overview of compliance lifecycle 3 minutes
Cloud security controls 4 minutes
Control mapping 3 minutes
Cloud security audits 3 minutes
Prepare for an audit 5 minutes
Cloud security control inheritance 4 minutes
Cloud resource hierarchy and security controls 2 minutes
Negative organizational impacts of non-compliance 3 minutes
Policy as code and infrastructure as code 3 minutes
Wrap-up 1 minute

9 readings Total 90 minutes

Learn more about controls for workloads and services 10 minutes
Activity: Review a compliance report 10 minutes
Activity Exemplar: Review a compliance report 10 minutes
Audits and security assessments 10 minutes
Best practices for Google Cloud resource hierarchy 10 minutes
Key considerations when writing policy as code 10 minutes
Activity: Review and update a risk management policy 10 minutes
Activity Exemplar: Review and update a risk management policy 10 minutes
Glossary terms from module 3 10 minutes

7 assignments Total 104 minutes

Activity Quiz: Review a compliance report 10 minutes
Test your knowledge: Control mapping 10 minutes
Test your knowledge: Assessments and auditing 10 minutes
Test your knowledge: Control inheritance and resource hierarchy 10 minutes
Activity Quiz: Review and update a risk management policy 8 minutes
Test your knowledge: Compliance, policy as code, and infrastructure as code 6 minutes
Module 3 challenge 50 minutes

Prepare for a thrilling expedition into the cloud! In this module, you'll skillfully wield the powers of Google's Security Command Center, Risk Manager, and Policy Analyzer – your trusty toolbox for conquering compliance challenges. Discover how these tools, combined with cloud security posture management (CSPM), form your ultimate defense system. You'll chart a course through the landscapes of CIS, NIST, ISO, and MITRE, learning to use their wisdom as your compass for risk management and security excellence.

What's included

12 videos10 readings6 assignments1 app item1 plugin

12 videos Total 40 minutes

Welcome to module 4 2 minutes
Vulnerability management frameworks 2 minutes
Introduction to multicloud CSPMs 4 minutes
Security Command Center 4 minutes
Security Command Center, Risk Manager, Policy Analyzer, Assured Workloads 4 minutes
Understand Google Cloud’s Risk Protection Program 3 minutes
The value of shared fate in cloud risk protection programs 4 minutes
Organizational policies in the cloud 4 minutes
Organization Policy Service 4 minutes
Wrap-up 1 minute
Patrick and Danielle: Interview role play 6 minutes
Course wrap-up 2 minutes

10 readings Total 120 minutes

Vulnerability management 10 minutes
Cloud security management (CSPM) resources 20 minutes
Cloud tools for risk management 20 minutes
Guide to risk assessment and compliance management with Security Command Center 10 minutes
Digital sovereignty and sovereign clouds 10 minutes
Organizational policy constraints, inheritance and violation 10 minutes
Interview tip: provide examples 10 minutes
Glossary terms from module 4 10 minutes
Course 2 resources and citations 10 minutes
Glossary terms from course 2 10 minutes