Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
DAY 1: ISO/IEC 27017 Fundamentals, Framework, and Cloud Risk Control
- Module 1: Introduction to ISO/IEC 27017 – Overview, its relationship with ISO/IEC 27001/27002, and standard objectives.
- Module 2: Scope of ISO/IEC 27017 – Additional controls, cloud environments, and defining audit boundaries.
- Module 3: ISO/IEC 27017 Certification Scheme – The certification model as an extension of ISO/IEC 27001.
- Module 4: ISO/IEC 27017 Auditor Competency Model – Essential competencies, cloud technical knowledge, and risk-based thinking.
- Module 5: Cloud-Specific Risk Examples – Risks associated with VM management, multi-tenancy, isolation, and legal jurisdictions.
- Module 6: Cloud Service Categories – Discussion on audit impacts for SaaS, PaaS, IaaS, NaaS, and DSaaS.
- Module 7: ISO/IEC 27017 Specific Controls – Shared responsibilities, VM hardening, and cloud service monitoring.
- Module 8: Control Mapping to Cloud Services – Aligning controls with IAM, Cloud Logging, Cloud KMS, and VPC.
DAY 2: Technical Audit Simulation & Regulatory Integration
- Module 9: Audit Simulation Planning – Defining the audit scope (GCP/Organization) and resource sampling.
- Module 10: Cloud Control Audit Simulation (Hands-on) – Assessing Access Control, Resource Configuration, and Security Posture using real evidence.
- Module 11: Cloud Regulations & Compliance Requirements
- Indonesia Cloud Regulations: In-depth analysis of POJK 11/2022 & PADK No. 1 Year 2026 regarding IT implementation by commercial banks.
- Mapping: Directly aligning ISO/IEC 27017 controls with local banking compliance needs.
- Module 12: ISO/IEC 27017 Certification Audit Process – Audit techniques, methodology, and lifecycle.
- Module 13: Integrated Audit Guidance – Comparative analysis between ISO/IEC 27001, 27017, and 27018.
- Module 14: Final Workshop – End-to-end audit simulation, compiling findings, and presenting results.
Requirements
- Familiarity with foundational IT security concepts.
- Practical experience with IT security and cloud platforms.
Target Audience
- IT security professionals within banking sectors.
- IT security teams at other financial institutions.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 2900 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (4)
Gaining insights and knowledge about auditing Cloud
Kuncoro Tri Setiadi - Pt bank Sinarmas
Course - Cloud Security Audit for Financial Institutions
Machine Translated
Cloud security standar
Singgih Sulaksono - Pt bank Sinarmas
Course - Cloud Security Audit for Financial Institutions
mas nya bagus berikan insightnya buat ngaudit and additional value
Retno Wulansari - Pt bank Sinarmas
Course - Cloud Security Audit for Financial Institutions
sharing knowledge
