Skip to main content

Home Google Cloud

Course

Strategies for Cloud Security Risk Management

IntermediateSkill Level

Updated 07/2026

This course is a thrilling mix of expert-led courses and immersive Google Cloud challenges through interactive labs.

Start Course for Free

Google CloudCloud

21 hr 15 min

45 videos

201 Exercises

10,100 XP

Statement of Accomplishment

Loved by learners at thousands of companies

Training a Team?

Try for Business

Course Description

This is the second of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll explore widely-used cloud risk management frameworks, exploring security domains, compliance lifecycles, and industry standards such as HIPAA, NIST CSF, and SOC. You'll develop skills in risk identification, implementation of security controls, compliance evaluation, and data protection management. Additionally, you'll gain hands-on experience with Google Cloud and multi-cloud tools specific to risk and compliance. This course also incorporates job application and interview preparation techniques, offering a comprehensive foundation to understand and effectively navigate the complex landscape of cloud risk management.

Prerequisites

There are no prerequisites for this course

1

Introduction to frameworks within security domains

Introduction to frameworks within security domainsIn this module, you’ll dive into the essential concepts of security domains, compliance frameworks, data privacy fundamentals, risk and security controls. You'll understand the key differences between security and compliance, and learn about controls and frameworks within the three pivotal areas of compliance: people, process, and technology. This module offers you the opportunity to explore risk and security controls in depth, giving you a clear view of how these controls are effectively implemented.

Introduction to Course 2

Course 2 overview

Preston: Continuous growth in cloud security

Helpful resources and tips

Lab technical tips

Explore your course 2 scenario: Cymbal Bank

Welcome to module 1

Introduction to cloud security domains

Explore compliance and security

Learn more about security and compliance with Google whitepapers

Phil: A day in the life of a Chief Information Security Officer

Test your knowledge: Security domains and compliance — Question 1

Test your knowledge: Security domains and compliance — Question 2

Test your knowledge: Security domains and compliance — Question 3

Test your knowledge: Security domains and compliance — Question 4

Security controls and compliance

Learn more about security controls

Risk and compliance

Test your knowledge: Risk, security controls, and compliance — Question 1

Test your knowledge: Risk, security controls, and compliance — Question 2

Test your knowledge: Risk, security controls, and compliance — Question 3

Test your knowledge: Risk, security controls, and compliance — Question 4

The three areas of compliance: People, process, and technology

Use existing frameworks to demonstrate compliance

Overview of the Google Cloud Security Command Center

Test your knowledge: Compliance and risk management — Question 1

Test your knowledge: Compliance and risk management — Question 2

Test your knowledge: Compliance and risk management — Question 3

Test your knowledge: Compliance and risk management — Question 4

Cloud security controls

Explore steps to implement security controls

Control mapping for risk management

Security control implementation

Test your knowledge: Security control mapping and implementation — Question 1

Test your knowledge: Security control mapping and implementation — Question 2

Test your knowledge: Security control mapping and implementation — Question 3

Test your knowledge: Security control mapping and implementation — Question 4

Glossary terms from module 1

Module 1 challenge — Question 1

Module 1 challenge — Question 2

Module 1 challenge — Question 3

Module 1 challenge — Question 4

Module 1 challenge — Question 5

Module 1 challenge — Question 6

Module 1 challenge — Question 7

Module 1 challenge — Question 8

Module 1 challenge — Question 9

Module 1 challenge — Question 10

2

Risk management and security frameworks, regulations, and standards

In this module, you’ll delve deeper into risk management frameworks, regulations, and industry standards, including NIST CSF, SOC 2, FedRAMP, HIPAA, and ISO 27001. You'll have the opportunity to compare and contrast these frameworks, standards, and regulations. Additionally, you'll learn how to effectively use these frameworks to establish controls and manage risks, ensuring compliance with various obligations.

Welcome to module 2

MK: Risk management in a cloud-first world

Introduction to risk management frameworks

Risk management and security frameworks

Compare and contrast risk management frameworks

Google’s Secure AI Framework

Test your knowledge: Risk management frameworks — Question 1

Test your knowledge: Risk management frameworks — Question 2

Test your knowledge: Risk management frameworks — Question 3

Test your knowledge: Risk management frameworks — Question 4

Test your knowledge: Risk management frameworks — Question 5

Data protection and privacy

Learn more about data protection and privacy regulations

Data protection and privacy scenarios

Test your knowledge: Data protection and privacy regulations — Question 1

Test your knowledge: Data protection and privacy regulations — Question 2

Test your knowledge: Data protection and privacy regulations — Question 3

Test your knowledge: Data protection and privacy regulations — Question 4

Industry-specific regulations and standards

Security frameworks, regulations, laws, and standards

Apply industry-specific requirements

Test your knowledge: Differences between and applications of industry regulations — Question 1

Test your knowledge: Differences between and applications of industry regulations — Question 2

Test your knowledge: Differences between and applications of industry regulations — Question 3

Test your knowledge: Differences between and applications of industry regulations — Question 4

Risk management industry standards

What is Google Cloud Risk Manager?

Test your knowledge: Industry standards — Question 1

Test your knowledge: Industry standards — Question 2

Test your knowledge: Industry standards — Question 3

Glossary terms from module 2

Module 2 challenge — Question 1

Module 2 challenge — Question 2

Module 2 challenge — Question 3

Module 2 challenge — Question 4

Module 2 challenge — Question 5

Module 2 challenge — Question 6

Module 2 challenge — Question 7

Module 2 challenge — Question 8

Module 2 challenge — Question 9

Module 2 challenge — Question 10

3

The compliance lifecycle

Recognize and define controls, including compensating controls and the control mapping process.

Welcome to module 3

Overview of compliance lifecycle

Cloud security controls

Control mapping

Learn more about controls for workloads and services

Activity: Review a compliance report

Activity Quiz: Review a compliance report — Question 1

Activity Quiz: Review a compliance report — Question 2

Activity Quiz: Review a compliance report — Question 3

Activity Quiz: Review a compliance report — Question 4

Activity Quiz: Review a compliance report — Question 5

Activity Exemplar: Review a compliance report

Test your knowledge: Control mapping — Question 1

Test your knowledge: Control mapping — Question 2

Test your knowledge: Control mapping — Question 3

Test your knowledge: Control mapping — Question 4

Test your knowledge: Control mapping — Question 5

Cloud security audits

Audits and security assessments

Prepare for an audit

Test your knowledge: Assessments and auditing — Question 1

Test your knowledge: Assessments and auditing — Question 2

Test your knowledge: Assessments and auditing — Question 3

Test your knowledge: Assessments and auditing — Question 4

Test your knowledge: Assessments and auditing — Question 5

Cloud security control inheritance

Cloud resource hierarchy and security controls

Best practices for Google Cloud resource hierarchy

Test your knowledge: Control inheritance and resource hierarchy — Question 1

Test your knowledge: Control inheritance and resource hierarchy — Question 2

Test your knowledge: Control inheritance and resource hierarchy — Question 3

Test your knowledge: Control inheritance and resource hierarchy — Question 4

Test your knowledge: Control inheritance and resource hierarchy — Question 5

Negative organizational impacts of non-compliance

Policy as code and infrastructure as code

Key considerations when writing policy as code

Activity: Review and update a risk management policy

Activity Quiz: Review and update a risk management policy — Question 1

Activity Quiz: Review and update a risk management policy — Question 2

Activity Quiz: Review and update a risk management policy — Question 3

Activity Quiz: Review and update a risk management policy — Question 4

Activity Exemplar: Review and update a risk management policy

Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 1

Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 2

Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 3

Glossary terms from module 3

Module 3 challenge — Question 1

Module 3 challenge — Question 2

Module 3 challenge — Question 3

Module 3 challenge — Question 4

Module 3 challenge — Question 5

Module 3 challenge — Question 6

Module 3 challenge — Question 7

Module 3 challenge — Question 8

Module 3 challenge — Question 9

Module 3 challenge — Question 10

4

Cloud tools for risk management and compliance

In this module, you'll navigate key cloud tools and their applications in risk and compliance, focusing on tools like Google's Security Command Center, Risk Manager, and Policy Analyzer, as well as cloud security posture management (CSPM). You'll learn how these tools, along with risk protection programs and organizational policies, are used for compliance and risk mitigation, and explore compliance frameworks like CIS, NIST, and ISO, and MITRE in risk management and security standards.

Welcome to module 4

Vulnerability management frameworks

Vulnerability management

Test your knowledge: Risk and compliance frameworks — Question 1

Test your knowledge: Risk and compliance frameworks — Question 2

Test your knowledge: Risk and compliance frameworks — Question 3

Test your knowledge: Risk and compliance frameworks — Question 4

Introduction to multicloud CSPMs

Security Command Center

Cloud security management (CSPM) resources

Test your knowledge: CSPMs — Question 1

Test your knowledge: CSPMs — Question 2

Test your knowledge: CSPMs — Question 3

Test your knowledge: CSPMs — Question 4

Security Command Center, Risk Manager, Policy Analyzer, Assured Workloads

Cloud tools for risk management

Guide to risk assessment and compliance management with Security Command Center

Use reports to remediate findings

Test your knowledge: Security Command Center — Question 1

Test your knowledge: Security Command Center — Question 2

Test your knowledge: Security Command Center — Question 3

Test your knowledge: Security Command Center — Question 4

Understand Google Cloud’s Risk Protection Program

The value of shared fate in cloud risk protection programs

Digital sovereignty and sovereign clouds

Test your knowledge: Risk protection programs — Question 1

Test your knowledge: Risk protection programs — Question 2

Test your knowledge: Risk protection programs — Question 3

Test your knowledge: Risk protection programs — Question 4

Organizational policies in the cloud

Organization Policy Service

Organizational policy constraints, inheritance and violation

Test your knowledge: Organizational policies — Question 1

Test your knowledge: Organizational policies — Question 2

Test your knowledge: Organizational policies — Question 3

Test your knowledge: Organizational policies — Question 4

Patrick and Danielle: Interview role play

Interview tip: provide examples

Glossary terms from module 4

Module 4 challenge — Question 1

Module 4 challenge — Question 2

Module 4 challenge — Question 3

Module 4 challenge — Question 4

Module 4 challenge — Question 5

Module 4 challenge — Question 6

Module 4 challenge — Question 7

Module 4 challenge — Question 8

Module 4 challenge — Question 9

Module 4 challenge — Question 10

Course wrap-up

Course 2 resources and citations

Glossary terms from course 2

Strategies for Cloud Security Risk Management

Course
Complete

Earn Statement of Accomplishment

Add this credential to your LinkedIn profile, resume, or CV
Share it on social media and in your performance reviewEnroll Now

Join over 19 million learners and start Strategies for Cloud Security Risk Management today!

Grow your data skills with DataCamp for Mobile

Make progress on the go with our mobile courses and daily 5-minute coding challenges.