Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Day 1: ISO/IEC 27017 Essentials & Framework and Cloud Risk & Control
- Module 1: ISO/IEC 27017 Introduction – Key objectives, alignment with ISO/IEC 27001/27002, and standard overview.
- Module 2: ISO/IEC 27017 Scope – Supplementary controls, cloud-specific environments, and defining audit perimeters.
- Module 3: ISO/IEC 27017 Certification Scheme – Certification framework as an extension of ISO/IEC 27001.
- Module 4: ISO/IEC 27017 Auditor Competency Model – Essential skills, cloud technical proficiency, and risk-centric analysis.
- Module 5: Cloud-Specific Risk Scenarios – VM administration risks, multi-tenancy challenges, isolation issues, and jurisdictional legal considerations.
- Module 6: Cloud Service Categories – Audit implications for SaaS, PaaS, IaaS, NaaS, and DSaaS.
- Module 7: ISO/IEC 27017 Specific Controls – Shared responsibility models, VM hardening, and continuous cloud monitoring.
- Module 8: Control Mapping to Cloud Services – Aligning controls with IAM, Cloud Logging, Cloud KMS, and VPC architectures.
Day 2: Technical Audit Simulation & Regulatory Integration
- Module 9: Audit Simulation Planning – Establishing audit scope (GCP/Organization) and sampling resources.
- Module 10: Cloud Control Audit Simulation (Hands-on) – Evaluating Access Control, Resource Configuration, and Security Posture using verifiable evidence.
- Module 11: Cloud Regulations & Compliance Requirements
- Indonesia Cloud Regulations: Detailed analysis of POJK 11/2022 & PADK No. 1 Year 2026 concerning IT implementation in commercial banks.
- Mapping: Directly aligning ISO/IEC 27017 controls with local banking compliance mandates.
- Module 12: ISO/IEC 27017 Certification Audit Process – Auditing techniques, methodologies, and lifecycle management.
- Module 13: Integrated Audit Guidance – Comparative analysis of ISO/IEC 27001, 27017, and 27018 standards.
- Module 14: Final Workshop – Comprehensive end-to-end audit simulation, findings preparation, and results presentation.
Requirements
- Familiarity with fundamental IT security principles.
- Practical experience with IT security frameworks and cloud infrastructure.
Target Audience
- IT security professionals within the banking sector.
- IT security specialists at other financial service providers.
Testimonials (3)
Cloud security standar
Singgih Sulaksono - Pt bank Sinarmas
Course - Cloud Security Audit for Financial Institutions
mas nya bagus berikan insightnya buat ngaudit and additional value
Retno Wulansari - Pt bank Sinarmas
Course - Cloud Security Audit for Financial Institutions
sharing knowledge
