Lead Cloud Security Manager.
Lead Cloud Security Manager training allows you to gain expertise in establishing, implementing, maintaining and continuously improving a cloud security program based on ISO/IEC 27017 and ISO/IEC 27018 standards. During this training, you will gain knowledge of cloud security concepts and principles, and learn how to manage and maintain a cloud security program to protect data in a cloud environment.
Issues
-
Security in the cloud
-
ISO/IEC 27017
-
ISO/IEC 27018
-
Cloud security program
-
Cloud environment
-
Data protection in the cloud
-
Cloud services
-
Cloud providers
-
Cloud security management
-
Cloud monitoring
-
Cloud best practices
-
Continuous improvement
Benefits
- Understand cloud security concepts, principles and best practices
- Master the methods and techniques for implementing and managing a cloud security program
- Gain skills to advise organizations on cloud security best practices
- Knowledge to manage a cloud security program
Who is this training for?
Prerequisites
- Basic knowledge of cloud technologies
- Knowledge of the basics of information security
- Experience working with cloud platforms (preferred)
- Technical and management skills
Training program
Day 1: Cloud Architecture and Security Model
- Cloud service models — IaaS, PaaS, SaaS, FaaS — differences in security responsibility
- Shared Responsibility Model — what the provider secures, what the customer secures
- Multi-tenant architecture — isolation, noisy neighbor, blast radius
- Overview of AWS, Azure, GCP security mechanisms — comparison
- Cloud Security Alliance (CSA) — STAR, CCM, CAIQ
- Standards and regulations — ISO 27017, ISO 27018, SOC 2, GDPR in the cloud context
Day 2: Identity and Access Management (IAM)
- Cloud IAM — users, groups, roles, policies, federation
- Principle of Least Privilege — designing minimal permission policies
- MFA, SSO, SAML, OIDC — authentication mechanisms
- Key and secret management — KMS, Vault, Secrets Manager
- PAM (Privileged Access Management) in the cloud environment
- Access auditing — logs, alerts, permission reviews
Day 3: Data Protection and Encryption
- Data classification in the cloud — categories, retention policies
- Encryption at-rest and in-transit — AES-256, TLS 1.3, envelope encryption
- Encryption key management — BYOK, HYOK, customer-managed keys
- Data Loss Prevention (DLP) in the cloud environment
- Backup and disaster recovery — RPO, RTO, geo-redundancy
- Data privacy — anonymization, pseudonymization, data residency
Day 4: Infrastructure Security and Monitoring
- Network security — VPC, security groups, NACLs, private endpoints
- CSPM (Cloud Security Posture Management) — automated configuration verification
- CWPP (Cloud Workload Protection Platform) — workload protection
- Container security — image scanning, runtime protection, pod security
- Serverless security — Lambda/Functions — specific risks
- SIEM and SOAR in the cloud — centralized logging, response automation
Day 5: Incident Response, Compliance, and Governance
- Incident response in the cloud — procedures, forensics, chain of custody
- Threat modeling for cloud architecture — STRIDE, PASTA
- Compliance as Code — automated compliance verification
- Cloud governance — policies, guardrails, landing zones
- Cloud risk management — assessment, mitigation, acceptance
- Lead Cloud Security Manager role — responsibilities, KPIs, board reporting
Delivery Methods
Online
- Convenience of participating from anywhere
- Interactive live sessions with trainer
- Materials available for 30 days
- No travel costs
On-site
- Direct contact with trainer and group
- Intensive hands-on workshops
- Networking with other participants
- Full focus on learning
Frequently asked questions
Who is the Lead Cloud Security Manager. training for?
This training is designed for professionals looking to develop skills in lead cloud security manager.. Required level: intermediate.
How long is the Lead Cloud Security Manager. training?
The training lasts 5. Available in online or on-site format.
Will I receive a certificate?
Yes — every participant receives a completion certificate confirming acquired competencies. EITT holds ISO 9001 accreditation.
Can this training be conducted for a closed group?
Yes — we offer dedicated closed trainings for companies. We customize the program to your team's needs. Contact us for an individual quote.
Request a quote
Funding Options
Check funding options for your company
Development Services Database
Up to 80% funding for SMEs from EU funds
Check availabilityNational Training Fund
Up to 100% funding for employers
Learn moreTrusted by
We train teams at Poland's largest companies
Interested in this training?
Contact us - we'll prepare an offer tailored to your organization's needs.