Cloud Operations Elements

---

Goals

• Analyze cloud infrastructure components.
• Analyze risks associated with cloud infrastructure.
• Critique security controls.
• Critique disaster recovery and business continuity management plans.
• Examine the need for training and awareness in application security.
• Outline cloud software assurance and validation.
• Examine the specifics of cloud application architecture.

• This section focuses on learning how data centers that host the cloud operate
  • security, resiliency, connectivity, logical design, heating and cooling, power

Designing a Secure Datacenter

• Build vs Buy a Datacenter
• Datacenter Location
• Datacenter Facilities and Resiliency
  • utilities
  • staffing
  • Datacenter Power Resilience
  • Datacenter Communications Redundancy
  • Other Datacenter Utilities Resilience
• Datacenter Physical Security
• SLAs
  • these elements of resilience may be covered by SLAs
  • tied to organizational control schemes
    • common to validate with audits
      • SOC 2
• Data Center Tiers
• Logical Design of Datacenters
• Virtualization Operations
• Hypervisor and Management Plane Hardening
• Datacenter Storage Operations

Managing Security Operations

• Security Operations Center (SOC)
  • Continuous Monitoring
  • Incident Management