Continuing IT Training Program
Cloud Computing II
Program OverviewThe purpose of this training is to acquaint the students with the types of audit, security, compliance, and other assurance tools available to the platform as a service (PaaS) and infrastructure as a service (IaaS) cloud client, the types of reports that are available to the cloud client, and key control areas that are the responsibility of the cloud client. This course will focus on the control responsibilities of the cloud client to enable the student to examine financial institutions that have implemented cloud solutions. The program will look at specific solutions for both Amazon AWS and Microsoft Azure, as well as general principles for any cloud platform.
Upon completion of this course, students will be able to:
- Identify the security and compliance benefits and risks of using the cloud.
- Discuss special governance topics (including vendor management) for cloud resources.
- Explain client identity and access management control environments in the cloud methods to secure sensitive data.
- Describe available client security services for risk assessment including auditing, logging, and monitoring tools.
- Discuss how client security and auditing tools can validate whether security controls are implemented and operating effectively.
- Describe the compliance and assurance programs of the cloud provider.
Facilitated classroom discussion and lectures
TBD, but not to exceed 4.5 days
Examiners or ITEAs who will lead or participate on level B and A examinations.
This course is open to appropriate staff of the FDIC and partner government regulatory agencies. This course is not open to the public or staff of private banks.
Participant should have attended ITEC, Introduction to Security, and Introduction to Telecommunications and Networking. In addition, participants should have completed at least most of the intermediate-level IT courses; specifically, students must have completed the Virtualization course and the Cloud Computing I course (formerly Cloud Computing and Virtualization).
For more information concerning course content and administration, please contact Kathryn Shipley at (703) 516-5071.