Google Cloud Security for Administrators (Custom Course)

SUMMARY:

A Cloud Security Engineer allows organizations to design and implement secure workloads and infrastructure on Google Cloud. Through an understanding of security best practices and industry requirements, these individual designs, develops, and manages a secure solution by using Google security technologies. A Cloud Security Engineer is proficient in identity and access management, defining organizational security structure and policies, using Google Cloud technologies to provide data protection, configuring network security defenses, monitoring environments for threats, security automation, AI security, the secure software supply chain, and enforcing regulatory controls.

OBJECTIVES:

At the end of this workshop, Cloud Security Engineers will understand how to:

• Configure access.
• Secure communications and establish boundary protection.
• Ensure data protection.
• Manage operations.
• Support compliance requirements.

DURATION:

Four or Five days, depending on the chosen topics.

CLASS FORMAT:

This class is an in-depth seminar/workshop which incorporates lectures, case studies and lab assignments and/or simulations.

TOPICS:

Day 1

• Managing Security in Google Cloud
• Foundations of Google Cloud Security
• Securing Access to Google Cloud
• Identity and Access Management (IAM)
• Configuring Virtual Private Cloud for Isolation and Security

Day 2

• Mitigating Security Vulnerabilities on Google Cloud
• Protecting against Distributed Denial of Service Attacks (DDoS)
• Content-Related Vulnerabilities: Techniques and Best Practices
• Monitoring and Observability in Google Cloud!
• Introduction to Google Cloud Operations Suite
• Monitoring Critical Systems
• Alerting Policies

Day 3

• Advanced Logging and Analysis
• Working with Audit Logs
• Best Practices in Google Cloud
• Securing Compute Engine: Techniques and Best Practices
• Securing Cloud Data: Techniques and Best Practices

Day 4

• Application Security: Techniques and Best Practices
• Securing Google Kubernetes Engine: Techniques and Best Practices

Day 5

One or two of the following topics are also available to review on Day 5 based on class feedback, but for clear expectation setting, an additional class would be required for a deep dive into any of these topics.

• Mitigate Threats and Vulnerabilities with Security Command Center: Challenge Lab
• Ensure Access & Identity in Google Cloud
• Build and Secure Networks in Google Cloud
• Google Kubernetes Engine Best Practices: Security