Course Code: iso27017
Duration: 14 hours
Prerequisites:
  • 云端运算的基本了解
  • 一般资讯安全原则的知识
  • 熟悉ISO 27001或其他网路安全框架

受众

  • 云端安全专业人员
  • IT安全经理
  • 合规专员
  • 云端服务提供商
Overview:

ISO/IEC 27017是一项国际标准,为特定于云服务的信息安全控制提供指导方针。它建立在ISO/IEC 27002之上,增强了针对云计算环境量身定制的安全措施。

这门由讲师主导的实时培训(在线或现场)旨在为希望实施ISO 27017控制以增强云安全性和合规性的中级IT和安全专业人员提供。

培训结束时,参与者将能够:

  • 了解ISO 27017的原则和目标。
  • 识别云环境特定的关键安全控制。
  • 在云服务提供商和云客户中实施ISO 27017控制。
  • 将云安全策略与ISO 27001要求对齐。
  • 确保遵守国际云安全最佳实践。

课程格式

  • 互动讲座和讨论。
  • 大量的练习和实践。
  • 在实验室环境中进行动手实施。

课程定制选项

  • 如需请求此课程的定制培训,请与我们联系以便安排。
Course Outline:

ISO 27017介绍

  • ISO/IEC 27017概述
  • 与ISO 27001和ISO 27002的关系
  • 云安全治理的重要性

Cloud Security风险和威胁

  • 云环境中的常见安全风险
  • 基于云的攻击向量
  • 云服务的风险评估方法论

ISO 27017中的关键信息安全控制

  • 额外的云端专用控制
  • CSP和客户之间的共享安全责任
  • 云端数据保护和加密

实施Cloud Security政策

  • 为云采用定义安全政策
  • Access控制和身份管理
  • 云端的安全事件管理

合规性和监管考虑

  • 云安全的法律和监管影响
  • 将ISO 27017对应到GDPR、HIPAA和其他法规
  • 云合规性审计和认证流程

Cloud Security的最佳实践

  • 安全监控和威胁检测
  • 在云安全中实施持续改进
  • 确保韧性和灾难恢复

实践和案例研究

  • 在现实世界场景中应用ISO 27017控制
  • 审查云安全案例研究
  • 关于云安全策略的互动演习

总结和后续步骤

Sites Published:

United Arab Emirates - ISO 27017: Information Security Controls for Cloud Services

Qatar - ISO 27017: Information Security Controls for Cloud Services

Egypt - ISO 27017: Information Security Controls for Cloud Services

Saudi Arabia - ISO 27017: Information Security Controls for Cloud Services

South Africa - ISO 27017: Information Security Controls for Cloud Services

Brasil - ISO 27017: Information Security Controls for Cloud Services

Canada - ISO 27017: Information Security Controls for Cloud Services

中国 - ISO 27017: Information Security Controls for Cloud Services

香港 - ISO 27017: Information Security Controls for Cloud Services

澳門 - ISO 27017: Information Security Controls for Cloud Services

台灣 - ISO 27017: Information Security Controls for Cloud Services

USA - ISO 27017: Information Security Controls for Cloud Services

Österreich - ISO 27017: Information Security Controls for Cloud Services

Schweiz - ISO 27017: Information Security Controls for Cloud Services

Deutschland - ISO 27017: Information Security Controls for Cloud Services

Czech Republic - ISO 27017: Information Security Controls for Cloud Services

Denmark - ISO 27017: Information Security Controls for Cloud Services

Estonia - ISO 27017: Information Security Controls for Cloud Services

Finland - ISO 27017: Information Security Controls for Cloud Services

Greece - ISO 27017: Information Security Controls for Cloud Services

Magyarország - ISO 27017: Information Security Controls for Cloud Services

Ireland - ISO 27017: Information Security Controls for Cloud Services

Luxembourg - ISO 27017: Information Security Controls for Cloud Services

Latvia - ISO 27017: Information Security Controls for Cloud Services

España - ISO 27017: Information Security Controls for Cloud Services

Italia - ISO 27017: Information Security Controls for Cloud Services

Lithuania - ISO 27017: Information Security Controls for Cloud Services

Nederland - ISO 27017: Information Security Controls for Cloud Services

Norway - ISO 27017: Information Security Controls for Cloud Services

Portugal - ISO 27017: Information Security Controls for Cloud Services

România - ISO 27017: Information Security Controls for Cloud Services

Sverige - ISO 27017: Information Security Controls for Cloud Services

Türkiye - ISO 27017: Information Security Controls for Cloud Services

Malta - ISO 27017: Information Security Controls for Cloud Services

Belgique - ISO 27017: Information Security Controls for Cloud Services

France - ISO 27017: Information Security Controls for Cloud Services

日本 - ISO 27017: Information Security Controls for Cloud Services

Australia - ISO 27017: Information Security Controls for Cloud Services

Malaysia - ISO 27017: Information Security Controls for Cloud Services

New Zealand - ISO 27017: Information Security Controls for Cloud Services

Philippines - ISO 27017: Information Security Controls for Cloud Services

Singapore - ISO 27017: Information Security Controls for Cloud Services

Thailand - ISO 27017: Information Security Controls for Cloud Services

Vietnam - ISO 27017: Information Security Controls for Cloud Services

India - ISO 27017: Information Security Controls for Cloud Services

Argentina - ISO 27017: Information Security Controls for Cloud Services

Chile - ISO 27017: Information Security Controls for Cloud Services

Costa Rica - ISO 27017: Information Security Controls for Cloud Services

Ecuador - ISO 27017: Information Security Controls for Cloud Services

Guatemala - ISO 27017: Information Security Controls for Cloud Services

Colombia - ISO 27017: Information Security Controls for Cloud Services

México - ISO 27017: Information Security Controls for Cloud Services

Panama - ISO 27017: Information Security Controls for Cloud Services

Peru - ISO 27017: Information Security Controls for Cloud Services

Uruguay - ISO 27017: Information Security Controls for Cloud Services

Venezuela - ISO 27017: Information Security Controls for Cloud Services

Polska - ISO 27017: Information Security Controls for Cloud Services

United Kingdom - ISO 27017: Information Security Controls for Cloud Services

South Korea - ISO 27017: Information Security Controls for Cloud Services

Pakistan - ISO 27017: Information Security Controls for Cloud Services

Sri Lanka - ISO 27017: Information Security Controls for Cloud Services

Bulgaria - ISO 27017: Information Security Controls for Cloud Services

Bolivia - ISO 27017: Information Security Controls for Cloud Services

Indonesia - ISO 27017: Information Security Controls for Cloud Services

Kazakhstan - ISO 27017: Information Security Controls for Cloud Services

Moldova - ISO 27017: Information Security Controls for Cloud Services

Morocco - ISO 27017: Information Security Controls for Cloud Services

Tunisia - ISO 27017: Information Security Controls for Cloud Services

Kuwait - ISO 27017: Information Security Controls for Cloud Services

Oman - ISO 27017: Information Security Controls for Cloud Services

Slovakia - ISO 27017: Information Security Controls for Cloud Services

Kenya - ISO 27017: Information Security Controls for Cloud Services

Nigeria - ISO 27017: Information Security Controls for Cloud Services

Botswana - ISO 27017: Information Security Controls for Cloud Services

Slovenia - ISO 27017: Information Security Controls for Cloud Services

Croatia - ISO 27017: Information Security Controls for Cloud Services

Serbia - ISO 27017: Information Security Controls for Cloud Services

Bhutan - ISO 27017: Information Security Controls for Cloud Services

Nepal - ISO 27017: Information Security Controls for Cloud Services

Uzbekistan - ISO 27017: Information Security Controls for Cloud Services