Sessions
Date, delivery mode, trainer and fee are specific to each session. Fees are per person.
Request a quote for a date for your organisation or for the next run.
Application formNo membership required
Get a quote
Training content
Overview
ISO/IEC 27017 Information Technology — Security Techniques Awareness Training has been designed to provide an understanding of the ISO/IEC 27017 requirements and good practice principles for ensuring information security in cloud computing environments, to recognise security risks in cloud services and to raise employees’ awareness of secure cloud use.
The language of the training is Turkish. The training is delivered online.
About the Training
The training covers the purpose and structure of the ISO/IEC 27017 standard, its relationship with ISO/IEC 27001 and ISO/IEC 27002, the responsibilities of cloud service providers and cloud service customers, access control, virtual environment security, asset management, data segregation, incident management, monitoring of cloud services and supplier relationships.
Who Should Attend?
- Employees of organisations that use cloud services
- Information security and cybersecurity personnel
- Information technology managers and employees
- Cloud system administrators
- Risk and compliance personnel
- Information security management system teams
- Employees responsible for supplier management
- Internal auditors
- Personnel working for cloud service providers
- Professionals seeking a basic understanding of ISO/IEC 27017
Objectives and Outcomes
It is intended that correct practices for its use are adopted.
At the End of the Training
Participants will be able to:
- explain the purpose and scope of the ISO/IEC 27017 standard.
- understand the relationship between ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27017.
- distinguish between the responsibilities of cloud service customers and providers.
- identify key security risks in cloud environments.
- understand access control and authorisation requirements.
- explain the importance of protecting virtual environments and cloud resources.
- assess the importance of data segregation and asset management in cloud environments.
- understand the processes for reporting and managing security incidents.
- recognise the requirements for monitoring and auditing cloud services.
- explain employees’ responsibilities regarding secure cloud use.
Programme and Method
Training Topics
- Purpose, Scope and Fundamental Concepts of ISO/IEC 27017
- Relationship between ISO/IEC 27001, ISO/IEC 27002 and ISO/IEC 27017
- Responsibilities of the Cloud Service Customer and Cloud Service Provider
- Information Security Risks and Risk Management in Cloud Environments
- Identity Management, Access Control and Authorisation
- Virtual Environments, Segregation of Resources and Cloud Infrastructure Security
- Data, Asset and Configuration Management
- Security Incidents, Monitoring, Logging and Technical Security Controls
- Supplier, Contract, Service Level and Third-Party Security
- Employee Awareness, Secure Cloud Use and Continual Improvement
Training Method
The training is delivered through topic presentations, explanations of ISO/IEC 27017 controls, cloud security risk scenarios, access and authorisation examples, assessments of cloud service provider and customer responsibilities, and case studies.
Attendance and Certificate
Certificate Rules
A certificate of attendance is issued to all participants whose attendance has been confirmed. To receive a certificate of achievement, participants must obtain a passing grade in the examination at the end of the training; participants who use all their examination attempts but do not pass will be issued a certificate of attendance.
FAQ and Resources
Who is the ISO/IEC 27017 Information Technology — Security Techniques Awareness Training suitable for?
It is intended for employees working in information technology, information security, cyber security, risk, compliance and supplier management within organisations that use or provide cloud computing services.
What is the main objective of the training?
The aim is to enable participants to understand information security risks in cloud computing environments and the controls recommended under ISO/IEC 27017, and to raise their awareness of secure cloud use.
What area does ISO/IEC 27017 cover?
Based on the ISO/IEC 27002 information security controls, ISO/IEC 27017 provides guidance on additional security practices specific to cloud services and on the responsibilities of cloud service customers and providers.
Is ISO/IEC 27017 an independent certification standard?
ISO/IEC 27017 is a code of practice for information security controls for cloud services. The principal certification standard for an Information Security Management System is ISO/IEC 27001.
Does the training include practical activities?
Yes. The training uses examples and case studies relating to cloud access, authorisation, virtual environment security, data management, incident management and supplier risks.
Is there an examination at the end of the training?
Yes. An assessment examination is administered at the end of the training.
References
- ISO/IEC 27017 Information Technology — Security Techniques — Code of Practice for Information Security Controls Based on ISO/IEC 27002 for Cloud Services
- ISO/IEC 27001 Information Security Management Systems
- ISO/IEC 27002 Information Security Controls
- ISO/IEC 27005 Guidance on Managing Information Security Risks
- ISO/IEC 27018 Protection of PII in Public Clouds
- ISO/IEC 27701 Privacy Information Management Systems
Similar trainings
EXEMPLAR002ISO/IEC 27701 Privacy Information Management System Transition Training8 hours · No session plannedEXEMPLAR011ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Awareness Training8 hours · No session plannedEXEMPLAR012ISO/IEC 27011 Information Security, Cybersecurity and Privacy Protection Internal Auditor Training16 hours · No session planned