Cloud Security Fundamentals

Programme Summary

Apply foundational security thinking to cloud workloads and their operational responsibilities. Participants examine identity, configuration, network controls, data protection, monitoring and resilience, then assess how weaknesses interact across a cloud environment. A controlled architecture case develops a prioritised security plan and verification approach, helping teams coordinate safeguards while recognising the limits of generic controls and provider assurances.

Training Objectives

1 Connect cloud security with workload and business context; 2 Clarify shared responsibilities and accountable control ownership; 3 Strengthen identity configuration and data protection decisions; 4 Improve monitoring response and resilience integration; 5 Support practical cloud security assurance and prioritisation.

Learning Outcomes

1 Map security responsibilities for a cloud workload; 2 Identify weaknesses in a supplied cloud architecture; 3 Select appropriate identity network and data safeguards; 4 Define monitoring recovery and verification measures; 5 Prepare a prioritised cloud security improvement plan.

Target Audience

Cloud Support Engineers; Security Analysts; IT Infrastructure Managers; Application Owners; Technology Risk Analysts; Cloud Operations Coordinators.

Target Industries

Technology Services; Financial Services; Telecommunications; Healthcare Services; E Commerce; Professional Services.

Course Contents

• Module 1 Cloud Security Context and Responsibilities: Workload scope and critical service needs; Shared responsibilities across cloud service models; Provider assurances and customer verification duties.
• Module 2 Asset Visibility and Cloud Governance: Accounts subscriptions projects and resource inventory; Policy ownership and approved deployment boundaries; Risk exceptions and change accountability.
• Module 3 Identity Authentication and Privileged Access: Federated identities and strong authentication; Least privilege roles and service identities; Privileged access review and emergency arrangements.
• Module 4 Network and Service Exposure: Segmentation connectivity and trust boundaries; Restrict unnecessary public access and endpoints; Review permitted flows and managed service interfaces.
• Module 5 Configuration and Secure Baselines: Approved settings and deployment templates; Detect drift and insecure configuration changes; Prioritise remediation using workload exposure.
• Module 6 Data Protection and Secrets: Classification encryption and key responsibilities; Secrets storage access and rotation concepts; Data sharing retention and deletion controls.
• Module 7 Application and Deployment Interfaces: Secure development and deployment responsibilities; Dependency and change control considerations; Access boundaries for automation identities.
• Module 8 Logging Monitoring and Detection: Relevant events and centralised visibility; Alert ownership investigation and retention needs; Protect logs and test detection coverage.
• Module 9 Vulnerability and Posture Management: Identify weaknesses and exposed services; Prioritise findings against business consequences; Verify remediation and manage accepted exceptions.
• Module 10 Incident Response and Recovery: Cloud evidence and provider coordination; Containment authority and operational consequences; Backup restoration and resilience verification.
• Module 11 Supplier and Assurance Review: Evaluate commitments scope and supporting evidence; Data location subcontractor and exit questions; Ongoing service review and control effectiveness.
• Module 12 Cloud Security Architecture Case: Review a fictional workload and configuration; Map controls responsibilities and evidence needs; Present prioritised remediation and verification actions.

Assessment

• 60 single best answer questions, including applied scenarios; one mark per question.
• 90 minute invigilated digital examination with identity verification. Approved accessibility adjustments preserve the assessed competence.
• Supplied reference sheets permitted; external AI, messaging and unapproved internet assistance prohibited.
• Individual applied assessment (45 minutes): Assess a fictional cloud architecture and configuration pack, identify five material weaknesses and propose prioritised safeguards with accountable owners and verification evidence.
• Assessment criteria: Accurate architecture risk and responsibility analysis; Relevant complementary security controls and priorities; Feasible monitoring recovery and verification evidence.
• Pass each component separately: 45/60 written marks (75%) and at least 70% on the applied task.
• All mandatory criteria must pass: Use only authorised training resources and preserve stated access boundaries.
• Individual results and feedback are provided. One reassessment may follow coaching under the published enrolment terms.

Certification

• Successful learners receive a TQCSI Arabia digital Certificate of Successful Completion.
• The certificate records the learner name, exact programme title, teaching hours, completion date and unique verification reference.
• Verified identity, full attendance and separate written and applied passes are required; all mandatory critical criteria must be met.
• Proposed issue target: within 30 calendar days of approved results and settlement of applicable fees.
• Records assessed cloud security fundamentals; it does not confer vendor certification, penetration testing authority or permission to modify production workloads.
• Attendance confirmation may record completed hours for unsuccessful learners; it does not certify successful completion.

Programme Profile

Number of daysNumber of daysNumber of days

333

Total teaching hoursTotal teaching hoursTotal teaching hours

18 hours; breaks, pre course work and formal final assessments excluded.18 hours; breaks, pre course work and formal final assessments excluded.18 hours; breaks, pre course work and formal final assessments excluded.

Delegates allowedDelegates allowedDelegates allowed

Maximum 16 delegates.Maximum 16 delegates.Maximum 16 delegates.

Training prerequisitesTraining prerequisitesTraining prerequisites

Cloud fundamentals and basic networking and cybersecurity knowledge are required. Familiarity with cloud operations or application delivery is recommended.Cloud fundamentals and basic networking and cybersecurity knowledge are required. Familiarity with cloud operations or application delivery is recommended.Cloud fundamentals and basic networking and cybersecurity knowledge are required. Familiarity with cloud operations or application delivery is recommended.

Pre course assignment and assessmentPre course assignment and assessmentPre course assignment and assessment

Review a fictional cloud architecture and complete a 45 minute diagnostic on responsibility, identity and configuration controls.Review a fictional cloud architecture and complete a 45 minute diagnostic on responsibility, identity and configuration controls.Review a fictional cloud architecture and complete a 45 minute diagnostic on responsibility, identity and configuration controls.

End of course assessmentEnd of course assessmentEnd of course assessment

60 question written exam (90 minutes) and individual applied task (45 minutes).60 question written exam (90 minutes) and individual applied task (45 minutes).60 question written exam (90 minutes) and individual applied task (45 minutes).

Passing criteriaPassing criteriaPassing criteria

75% written and 70% applied, passed separately; full attendance. All mandatory criteria must pass.75% written and 70% applied, passed separately; full attendance. All mandatory criteria must pass.75% written and 70% applied, passed separately; full attendance. All mandatory criteria must pass.