|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/strategies-for-cloud-security-risk-management
课程评论：没有评论
课程名称：云安全风险管理策略 课程概述：准备好迎接更多挑战了吗？这是谷歌云网络安全证书的第二门课程。破解安全和合规的密码！这门课程是你解锁安全领域、框架和数据隐私的关键。了解风险、控制以及合规的三大支柱：人、流程和技术的秘密语言！ 课程大纲： 1. **安全领域内框架简介** 本模块将深入探讨安全领域、合规框架、数据隐私基础、风险和安全控制的基本概念。你将认识到安全与合规之间的关键区别，并了解在合规三大领域（人、流程和技术）内的控制和框架。进一步探索风险和安全控制的实施方式，帮助你形成清晰的视角。 2. **风险管理与安全框架、法规及标准** 准备好提升你的风险管理技能！在这一模块中，你将破解NIST CSF、SOC 2、FedRAMP、HIPAA和ISO 27001等热门框架的密码。你将比较这些框架，帮助你选择最适合的解决方案。同时，学习如何利用这些框架建立自己的安全堡垒，保护数据安全，开启风险管理的史诗之旅。 3. **合规生命周期** 本模块将揭示合规生命周期的秘密。想象一下它如同一个规则和法规的迷宫——你将学习如何规划路径、规避不合规的陷阱，并像老练的探险者一样进行审计。发现政策作为代码（Policy-as-Code，PaC）如何将强有力的保护措施直接融入到你的基础设施代码（Infrastructure-as-Code，IaC）中，使其成为一个自我防御的堡垒。 4. **风险管理和合规的云工具** 准备好进行一次激动人心的云端探险！在这一模块中，你将熟练运用谷歌的安全指挥中心、风险管理器和政策分析器等工具，成为征服合规挑战的得力助手。学习如何将这些工具与云安全态势管理（CSPM）结合，形成你最终的防御系统。探索CIS、NIST、ISO和MITRE的知识，掌握风险管理和安全卓越的指南针。 通过本课程，学员将能够在云环境中有效管理安全风险，确保合规性，并构建强健的安全体系。
Name:Introduction to frameworks within security domains
Description:In this module, you’ll dive into the essential concepts of security domains, compliance frameworks, data privacy fundamentals, risk and security controls. You'll discover the key differences between security and compliance, and learn about controls and frameworks within the three pivotal areas of compliance: people, process, and technology. Explore risk and security controls in depth, giving you a clear view of how these controls are effectively implemented.
Name:Risk management and security frameworks, regulations, and standards
Description:Get ready to level up your risk management game! In this module, you'll crack the code on popular frameworks like NIST CSF, SOC 2, FedRAMP, HIPAA, and ISO 27001. You'll compare and contrast these frameworks like superheroes in a face-off, so you can pick the perfect one for any situation. Plus, you'll learn how to use them to build your own fortress of security, keeping your data safe and sound. So, buckle up and get ready for an epic adventure in risk management proficiency.
Name:The compliance lifecycle
Description:In this module, you'll unlock the secrets of the compliance lifecycle. Imagine it as a labyrinth of rules and regulations – you'll learn how to map your path through controls, dodge the pitfalls of non-compliance, and perform audits like a seasoned adventurer. Discover how Policy-as-Code (PaC) can weave powerful safeguards directly into your Infrastructure-as-Code (IaC), transforming it into a self-defending fortress.
Name:Cloud tools for risk management and compliance
Description:Prepare for a thrilling expedition into the cloud! In this module, you'll skillfully wield the powers of Google's Security Command Center, Risk Manager, and Policy Analyzer – your trusty toolbox for conquering compliance challenges. Discover how these tools, combined with cloud security posture management (CSPM), form your ultimate defense system. You'll chart a course through the landscapes of CIS, NIST, ISO, and MITRE, learning to use their wisdom as your compass for risk management and security excellence.
Ready for more?! This is the second course of the Google Cloud Cybersecurity Certificate. Crack the code of security and compliance! ️ This course is your decoder ring to unlock the world of security domains, frameworks, and data privacy. Discover the secret language of risk, controls, and the trio of compliance: people, process, and tech!
