Overview

This is the second of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll explore widely-used cloud risk management frameworks, exploring security domains, compliance lifecycles, and industry standards such as HIPAA, NIST CSF, and SOC. You'll develop skills in risk identification, implementation of security controls, compliance evaluation, and data protection management. Additionally, you'll gain hands-on experience with Google Cloud and multi-cloud tools specific to risk and compliance. This course also incorporates job application and interview preparation techniques, offering a comprehensive foundation to understand and effectively navigate the complex landscape of cloud risk management.

Syllabus

Introduction to frameworks within security domains

Introduction to Course 2
Course 2 overview
Preston: Continuous growth in cloud security
Helpful resources and tips
Lab technical tips
Explore your course 2 scenario: Cymbal Bank
Welcome to module 1
Introduction to cloud security domains
Explore compliance and security
Learn more about security and compliance with Google whitepapers
Phil: A day in the life of a Chief Information Security Officer
Test your knowledge: Security domains and compliance
Security controls and compliance
Learn more about security controls
Risk and compliance
Test your knowledge: Risk, security controls, and compliance
The three areas of compliance: People, process, and technology
Use existing frameworks to demonstrate compliance
Overview of the Google Cloud Security Command Center
Test your knowledge: Compliance and risk management
Cloud security controls
Explore steps to implement security controls
Control mapping for risk management
Security control implementation
Test your knowledge: Security control mapping and implementation
Wrap-up
Glossary terms from module 1
Module 1 challenge

Risk management and security frameworks, regulations, and standards

Welcome to module 2
MK: Risk management in a cloud-first world
Introduction to risk management frameworks
Risk management and security frameworks
Compare and contrast risk management frameworks
Google’s Secure AI Framework
Test your knowledge: Risk management frameworks
Data protection and privacy
Learn more about data protection and privacy regulations
Data protection and privacy scenarios
Test your knowledge: Data protection and privacy regulations
Industry-specific regulations and standards
Security frameworks, regulations, laws, and standards
Apply industry-specific requirements
Test your knowledge: Differences between and applications of industry regulations
Risk management industry standards
What is Google Cloud Risk Manager?
Test your knowledge: Industry standards
Wrap-up
Glossary terms from module 2
Module 2 challenge