Course Code: iso27017
Duration: 14 hours
Prerequisites:
  • 雲端運算的基本了解
  • 一般資訊安全原則的知識
  • 熟悉ISO 27001或其他網路安全框架

受眾

  • 雲端安全專業人員
  • IT安全經理
  • 合規專員
  • 雲端服務提供商
Overview:

ISO/IEC 27017是一項國際標準,為特定於雲服務的信息安全控制提供指導方針。它建立在ISO/IEC 27002之上,增強了針對雲計算環境量身定制的安全措施。

這門由講師主導的實時培訓(在線或現場)旨在為希望實施ISO 27017控制以增強雲安全性和合規性的中級IT和安全專業人員提供。

培訓結束時,參與者將能夠:

  • 了解ISO 27017的原則和目標。
  • 識別雲環境特定的關鍵安全控制。
  • 在雲服務提供商和雲客戶中實施ISO 27017控制。
  • 將雲安全策略與ISO 27001要求對齊。
  • 確保遵守國際雲安全最佳實踐。

課程格式

  • 互動講座和討論。
  • 大量的練習和實踐。
  • 在實驗室環境中進行動手實施。

課程定制選項

  • 如需請求此課程的定制培訓,請與我們聯繫以便安排。
Course Outline:

ISO 27017介紹

  • ISO/IEC 27017概述
  • 與ISO 27001和ISO 27002的關係
  • 雲安全治理的重要性

Cloud Security風險和威脅

  • 雲環境中的常見安全風險
  • 基於雲的攻擊向量
  • 雲服務的風險評估方法論

ISO 27017中的關鍵信息安全控制

  • 額外的雲端專用控制
  • CSP和客戶之間的共享安全責任
  • 雲端數據保護和加密

實施Cloud Security政策

  • 為雲採用定義安全政策
  • Access控制和身份管理
  • 雲端的安全事件管理

合規性和監管考慮

  • 雲安全的法律和監管影響
  • 將ISO 27017對應到GDPR、HIPAA和其他法規
  • 雲合規性審計和認證流程

Cloud Security的最佳實踐

  • 安全監控和威脅檢測
  • 在雲安全中實施持續改進
  • 確保韌性和災難恢復

實踐和案例研究

  • 在現實世界場景中應用ISO 27017控制
  • 審查雲安全案例研究
  • 關於雲安全策略的互動演習

總結和後續步驟

Sites Published:

United Arab Emirates - ISO 27017: Information Security Controls for Cloud Services

Qatar - ISO 27017: Information Security Controls for Cloud Services

Egypt - ISO 27017: Information Security Controls for Cloud Services

Saudi Arabia - ISO 27017: Information Security Controls for Cloud Services

South Africa - ISO 27017: Information Security Controls for Cloud Services

Brasil - ISO 27017: Information Security Controls for Cloud Services

Canada - ISO 27017: Information Security Controls for Cloud Services

中国 - ISO 27017: Information Security Controls for Cloud Services

香港 - ISO 27017: Information Security Controls for Cloud Services

澳門 - ISO 27017: Information Security Controls for Cloud Services

台灣 - ISO 27017: Information Security Controls for Cloud Services

USA - ISO 27017: Information Security Controls for Cloud Services

Österreich - ISO 27017: Information Security Controls for Cloud Services

Schweiz - ISO 27017: Information Security Controls for Cloud Services

Deutschland - ISO 27017: Information Security Controls for Cloud Services

Czech Republic - ISO 27017: Information Security Controls for Cloud Services

Denmark - ISO 27017: Information Security Controls for Cloud Services

Estonia - ISO 27017: Information Security Controls for Cloud Services

Finland - ISO 27017: Information Security Controls for Cloud Services

Greece - ISO 27017: Information Security Controls for Cloud Services

Magyarország - ISO 27017: Information Security Controls for Cloud Services

Ireland - ISO 27017: Information Security Controls for Cloud Services

Luxembourg - ISO 27017: Information Security Controls for Cloud Services

Latvia - ISO 27017: Information Security Controls for Cloud Services

España - ISO 27017: Information Security Controls for Cloud Services

Italia - ISO 27017: Information Security Controls for Cloud Services

Lithuania - ISO 27017: Information Security Controls for Cloud Services

Nederland - ISO 27017: Information Security Controls for Cloud Services

Norway - ISO 27017: Information Security Controls for Cloud Services

Portugal - ISO 27017: Information Security Controls for Cloud Services

România - ISO 27017: Information Security Controls for Cloud Services

Sverige - ISO 27017: Information Security Controls for Cloud Services

Türkiye - ISO 27017: Information Security Controls for Cloud Services

Malta - ISO 27017: Information Security Controls for Cloud Services

Belgique - ISO 27017: Information Security Controls for Cloud Services

France - ISO 27017: Information Security Controls for Cloud Services

日本 - ISO 27017: Information Security Controls for Cloud Services

Australia - ISO 27017: Information Security Controls for Cloud Services

Malaysia - ISO 27017: Information Security Controls for Cloud Services

New Zealand - ISO 27017: Information Security Controls for Cloud Services

Philippines - ISO 27017: Information Security Controls for Cloud Services

Singapore - ISO 27017: Information Security Controls for Cloud Services

Thailand - ISO 27017: Information Security Controls for Cloud Services

Vietnam - ISO 27017: Information Security Controls for Cloud Services

India - ISO 27017: Information Security Controls for Cloud Services

Argentina - ISO 27017: Information Security Controls for Cloud Services

Chile - ISO 27017: Information Security Controls for Cloud Services

Costa Rica - ISO 27017: Information Security Controls for Cloud Services

Ecuador - ISO 27017: Information Security Controls for Cloud Services

Guatemala - ISO 27017: Information Security Controls for Cloud Services

Colombia - ISO 27017: Information Security Controls for Cloud Services

México - ISO 27017: Information Security Controls for Cloud Services

Panama - ISO 27017: Information Security Controls for Cloud Services

Peru - ISO 27017: Information Security Controls for Cloud Services

Uruguay - ISO 27017: Information Security Controls for Cloud Services

Venezuela - ISO 27017: Information Security Controls for Cloud Services

Polska - ISO 27017: Information Security Controls for Cloud Services

United Kingdom - ISO 27017: Information Security Controls for Cloud Services

South Korea - ISO 27017: Information Security Controls for Cloud Services

Pakistan - ISO 27017: Information Security Controls for Cloud Services

Sri Lanka - ISO 27017: Information Security Controls for Cloud Services

Bulgaria - ISO 27017: Information Security Controls for Cloud Services

Bolivia - ISO 27017: Information Security Controls for Cloud Services

Indonesia - ISO 27017: Information Security Controls for Cloud Services

Kazakhstan - ISO 27017: Information Security Controls for Cloud Services

Moldova - ISO 27017: Information Security Controls for Cloud Services

Morocco - ISO 27017: Information Security Controls for Cloud Services

Tunisia - ISO 27017: Information Security Controls for Cloud Services

Kuwait - ISO 27017: Information Security Controls for Cloud Services

Oman - ISO 27017: Information Security Controls for Cloud Services

Slovakia - ISO 27017: Information Security Controls for Cloud Services

Kenya - ISO 27017: Information Security Controls for Cloud Services

Nigeria - ISO 27017: Information Security Controls for Cloud Services

Botswana - ISO 27017: Information Security Controls for Cloud Services

Slovenia - ISO 27017: Information Security Controls for Cloud Services

Croatia - ISO 27017: Information Security Controls for Cloud Services

Serbia - ISO 27017: Information Security Controls for Cloud Services

Bhutan - ISO 27017: Information Security Controls for Cloud Services

Nepal - ISO 27017: Information Security Controls for Cloud Services

Uzbekistan - ISO 27017: Information Security Controls for Cloud Services