Chuyển đến nội dung chính

Trang chủ Google Cloud

Khóa học

Strategies for Cloud Security Risk Management

Trung cấpTrình độ kỹ năng

Đã cập nhật tháng 07, 2026

This course is a thrilling mix of expert-led courses and immersive Google Cloud challenges through interactive labs.

Bắt Đầu Khóa Học Miễn Phí

Google CloudCloud

21 giờ 15 phút

45 video

201 Bài tập

10,100 XP

Giấy chứng nhận Thành tích

Được người học tại hàng ngàn công ty yêu thích

Đào tạo một đội ngũ?

Dùng thử cho Doanh nghiệp

Mô tả khóa học

This is the second of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll explore widely-used cloud risk management frameworks, exploring security domains, compliance lifecycles, and industry standards such as HIPAA, NIST CSF, and SOC. You'll develop skills in risk identification, implementation of security controls, compliance evaluation, and data protection management. Additionally, you'll gain hands-on experience with Google Cloud and multi-cloud tools specific to risk and compliance. This course also incorporates job application and interview preparation techniques, offering a comprehensive foundation to understand and effectively navigate the complex landscape of cloud risk management.

Điều kiện tiên quyết

Không có điều kiện tiên quyết cho khóa học này

1

Introduction to frameworks within security domains

Introduction to frameworks within security domainsIn this module, you’ll dive into the essential concepts of security domains, compliance frameworks, data privacy fundamentals, risk and security controls. You'll understand the key differences between security and compliance, and learn about controls and frameworks within the three pivotal areas of compliance: people, process, and technology. This module offers you the opportunity to explore risk and security controls in depth, giving you a clear view of how these controls are effectively implemented.

Introduction to Course 2

Course 2 overview

Preston: Continuous growth in cloud security

Helpful resources and tips

Lab technical tips

Explore your course 2 scenario: Cymbal Bank

Welcome to module 1

Introduction to cloud security domains

Explore compliance and security

Learn more about security and compliance with Google whitepapers

Phil: A day in the life of a Chief Information Security Officer

Test your knowledge: Security domains and compliance — Question 1

Test your knowledge: Security domains and compliance — Question 2

Test your knowledge: Security domains and compliance — Question 3

Test your knowledge: Security domains and compliance — Question 4

Security controls and compliance

Learn more about security controls

Risk and compliance

Test your knowledge: Risk, security controls, and compliance — Question 1

Test your knowledge: Risk, security controls, and compliance — Question 2

Test your knowledge: Risk, security controls, and compliance — Question 3

Test your knowledge: Risk, security controls, and compliance — Question 4

The three areas of compliance: People, process, and technology

Use existing frameworks to demonstrate compliance

Overview of the Google Cloud Security Command Center

Test your knowledge: Compliance and risk management — Question 1

Test your knowledge: Compliance and risk management — Question 2

Test your knowledge: Compliance and risk management — Question 3

Test your knowledge: Compliance and risk management — Question 4

Cloud security controls

Explore steps to implement security controls

Control mapping for risk management

Security control implementation

Test your knowledge: Security control mapping and implementation — Question 1

Test your knowledge: Security control mapping and implementation — Question 2

Test your knowledge: Security control mapping and implementation — Question 3

Test your knowledge: Security control mapping and implementation — Question 4

Glossary terms from module 1

Module 1 challenge — Question 1

Module 1 challenge — Question 2

Module 1 challenge — Question 3

Module 1 challenge — Question 4

Module 1 challenge — Question 5

Module 1 challenge — Question 6

Module 1 challenge — Question 7

Module 1 challenge — Question 8

Module 1 challenge — Question 9

Module 1 challenge — Question 10

Bắt Đầu Chương

2

Risk management and security frameworks, regulations, and standards

In this module, you’ll delve deeper into risk management frameworks, regulations, and industry standards, including NIST CSF, SOC 2, FedRAMP, HIPAA, and ISO 27001. You'll have the opportunity to compare and contrast these frameworks, standards, and regulations. Additionally, you'll learn how to effectively use these frameworks to establish controls and manage risks, ensuring compliance with various obligations.

Welcome to module 2

MK: Risk management in a cloud-first world

Introduction to risk management frameworks

Risk management and security frameworks

Compare and contrast risk management frameworks

Google’s Secure AI Framework

Test your knowledge: Risk management frameworks — Question 1

Test your knowledge: Risk management frameworks — Question 2

Test your knowledge: Risk management frameworks — Question 3

Test your knowledge: Risk management frameworks — Question 4

Test your knowledge: Risk management frameworks — Question 5

Data protection and privacy

Learn more about data protection and privacy regulations

Data protection and privacy scenarios

Test your knowledge: Data protection and privacy regulations — Question 1

Test your knowledge: Data protection and privacy regulations — Question 2

Test your knowledge: Data protection and privacy regulations — Question 3

Test your knowledge: Data protection and privacy regulations — Question 4

Industry-specific regulations and standards

Security frameworks, regulations, laws, and standards

Apply industry-specific requirements

Test your knowledge: Differences between and applications of industry regulations — Question 1

Test your knowledge: Differences between and applications of industry regulations — Question 2

Test your knowledge: Differences between and applications of industry regulations — Question 3

Test your knowledge: Differences between and applications of industry regulations — Question 4

Risk management industry standards

What is Google Cloud Risk Manager?

Test your knowledge: Industry standards — Question 1

Test your knowledge: Industry standards — Question 2

Test your knowledge: Industry standards — Question 3

Glossary terms from module 2

Module 2 challenge — Question 1

Module 2 challenge — Question 2

Module 2 challenge — Question 3

Module 2 challenge — Question 4

Module 2 challenge — Question 5

Module 2 challenge — Question 6

Module 2 challenge — Question 7

Module 2 challenge — Question 8

Module 2 challenge — Question 9

Module 2 challenge — Question 10

Bắt Đầu Chương

3

The compliance lifecycle

Recognize and define controls, including compensating controls and the control mapping process.

Welcome to module 3

Overview of compliance lifecycle

Cloud security controls

Control mapping

Learn more about controls for workloads and services

Activity: Review a compliance report

Activity Quiz: Review a compliance report — Question 1

Activity Quiz: Review a compliance report — Question 2

Activity Quiz: Review a compliance report — Question 3

Activity Quiz: Review a compliance report — Question 4

Activity Quiz: Review a compliance report — Question 5

Activity Exemplar: Review a compliance report

Test your knowledge: Control mapping — Question 1

Test your knowledge: Control mapping — Question 2

Test your knowledge: Control mapping — Question 3

Test your knowledge: Control mapping — Question 4

Test your knowledge: Control mapping — Question 5

Cloud security audits

Audits and security assessments

Prepare for an audit

Test your knowledge: Assessments and auditing — Question 1

Test your knowledge: Assessments and auditing — Question 2

Test your knowledge: Assessments and auditing — Question 3

Test your knowledge: Assessments and auditing — Question 4

Test your knowledge: Assessments and auditing — Question 5

Cloud security control inheritance

Cloud resource hierarchy and security controls

Best practices for Google Cloud resource hierarchy

Test your knowledge: Control inheritance and resource hierarchy — Question 1

Test your knowledge: Control inheritance and resource hierarchy — Question 2

Test your knowledge: Control inheritance and resource hierarchy — Question 3

Test your knowledge: Control inheritance and resource hierarchy — Question 4

Test your knowledge: Control inheritance and resource hierarchy — Question 5

Negative organizational impacts of non-compliance

Policy as code and infrastructure as code

Key considerations when writing policy as code

Activity: Review and update a risk management policy

Activity Quiz: Review and update a risk management policy — Question 1

Activity Quiz: Review and update a risk management policy — Question 2

Activity Quiz: Review and update a risk management policy — Question 3

Activity Quiz: Review and update a risk management policy — Question 4

Activity Exemplar: Review and update a risk management policy

Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 1

Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 2

Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 3

Glossary terms from module 3

Module 3 challenge — Question 1

Module 3 challenge — Question 2

Module 3 challenge — Question 3

Module 3 challenge — Question 4

Module 3 challenge — Question 5

Module 3 challenge — Question 6

Module 3 challenge — Question 7

Module 3 challenge — Question 8

Module 3 challenge — Question 9

Module 3 challenge — Question 10

Bắt Đầu Chương

4

Cloud tools for risk management and compliance

In this module, you'll navigate key cloud tools and their applications in risk and compliance, focusing on tools like Google's Security Command Center, Risk Manager, and Policy Analyzer, as well as cloud security posture management (CSPM). You'll learn how these tools, along with risk protection programs and organizational policies, are used for compliance and risk mitigation, and explore compliance frameworks like CIS, NIST, and ISO, and MITRE in risk management and security standards.

Welcome to module 4

Vulnerability management frameworks

Vulnerability management

Test your knowledge: Risk and compliance frameworks — Question 1

Test your knowledge: Risk and compliance frameworks — Question 2

Test your knowledge: Risk and compliance frameworks — Question 3

Test your knowledge: Risk and compliance frameworks — Question 4

Introduction to multicloud CSPMs

Security Command Center

Cloud security management (CSPM) resources

Test your knowledge: CSPMs — Question 1

Test your knowledge: CSPMs — Question 2

Test your knowledge: CSPMs — Question 3

Test your knowledge: CSPMs — Question 4

Security Command Center, Risk Manager, Policy Analyzer, Assured Workloads

Cloud tools for risk management

Guide to risk assessment and compliance management with Security Command Center

Use reports to remediate findings

Test your knowledge: Security Command Center — Question 1

Test your knowledge: Security Command Center — Question 2

Test your knowledge: Security Command Center — Question 3

Test your knowledge: Security Command Center — Question 4

Understand Google Cloud’s Risk Protection Program

The value of shared fate in cloud risk protection programs

Digital sovereignty and sovereign clouds

Test your knowledge: Risk protection programs — Question 1

Test your knowledge: Risk protection programs — Question 2

Test your knowledge: Risk protection programs — Question 3

Test your knowledge: Risk protection programs — Question 4

Organizational policies in the cloud

Organization Policy Service

Organizational policy constraints, inheritance and violation

Test your knowledge: Organizational policies — Question 1

Test your knowledge: Organizational policies — Question 2

Test your knowledge: Organizational policies — Question 3

Test your knowledge: Organizational policies — Question 4

Patrick and Danielle: Interview role play

Interview tip: provide examples

Glossary terms from module 4

Module 4 challenge — Question 1

Module 4 challenge — Question 2

Module 4 challenge — Question 3

Module 4 challenge — Question 4

Module 4 challenge — Question 5

Module 4 challenge — Question 6

Module 4 challenge — Question 7

Module 4 challenge — Question 8

Module 4 challenge — Question 9

Module 4 challenge — Question 10

Course wrap-up

Course 2 resources and citations

Glossary terms from course 2

Bắt Đầu Chương

Strategies for Cloud Security Risk Management

Hoàn
Thành

Nhận Giấy Chứng Nhận Hoàn Thành

Thêm chứng chỉ này vào hồ sơ LinkedIn, CV hoặc sơ yếu lý lịch của ban
Chia sẻ trên mạng xã hội và trong đánh giá hiệu suất của banĐăng ký ngay

Tham gia cùng hơn 19 triệu học viên và bắt đầu Strategies for Cloud Security Risk Management ngay hôm nay!

Phát triển kỹ năng dữ liệu với DataCamp cho thiết bị di động

Tiến bộ mọi lúc mọi nơi với các khóa học cho thiết bị di động và thử thách lập trình 5 phút hằng ngày.