Related Courses
Take your career to the next level with higher education that works for you
Course Overview
Organisations need to work with Cloud platform providers to ensure that data is stored, handled, processed and transferred responsibly with due care and attention to data privacy regulations. This involves constant scrutiny and negotiation from a position of knowledge and strength to ensure best practice is applied.
This course helps delegates identify the non-negotiable requirements for PII in the public Cloud in the context of prevailing regulations and laws in the EU, UK and more broadly, the obligations of a public Cloud processor. This includes the roles and responsibilities of data processors and data controllers when processing in the Cloud, and how the concept of data sovereignty applies.
Delegates will understand how the principles of data privacy apply to PII processors and will be able to pinpoint the specific risks to PII that each control mitigates and study the process and skill of auditing and reviewing information security in the public Cloud, using available audit techniques.
The course is delivered online, with access to the e-Learning materials for 12 months.
Course Content
ISO 27018 narrows its focus to the protection of personally identifiable information (PII) in public cloud environments. It provides a code of practice for cloud service providers processing PII.
This online training will cover the following topics:
- Key EU, UK and other privacy regulations and laws
- The roles and responsibilities of data processors and controllers
- Key terminology and concepts as used in different standards and regulations
- Risk scenarios and the limits of mitigating controls
- How ISO 27002 applies to cover PII in the public Cloud
- The detailed obligations of a public Cloud PII processor
- Relevant access control, access management and cryptography operations
- Protection of data at rest including backup and restoration
- Incident management for PII in the Cloud
- Performing information security reviews via audit services and other means
Benefits
By attending this online course, delegates will deepen their understanding in using the terminology of data privacy and data protection confidently, analysing environments, contracts and processes with confidence.
Prerequisites
Delegates will need an advanced understanding of ISO/IEC 27002:2013 and a practical understanding of how to implement and audit an ISMS. Ideally, having trained as an ISO 27001 Lead Auditor or Lead Implementer.
We recommend purchasing and reading the following standard before attending the course:
- The EU Data Protection Code of Conduct for Cloud Service Providers – A guide to compliance
Assessment
Certified ISO 27018:2019 CIS CPS Cloud Privacy Specialist (CIS CPS) exam
Candidates take the CIS CCS exam set by IBITGQ (International Board for IT Governance Qualifications) at the end of the course.
Delivery method: Online
Duration: 60 minutes
Questions: 40
Format: Multiple choice
There is no extra charge for this exam.
Course Tutor
IT Governance - A GRC Solutions Company
IT Governance - A GRC Solutions Company is a professional services company, founded in 2002, with a wealth of consultancy skills that originally focused on information security/cybersecurity standards, notably ISO27001. Their consultants have extensive practical experience of designing and implementing management systems and help to develop the skills needed to deliver best practice and compliance in an organisation. The company has an impressive track record having helped well over 130 clients over the years to successfully gain the coveted ISO27001 certificate, proving their compliance with one of the most demanding management system standards. They have since developed their offerings into various other management disciplines and now provide a comprehensive single source of information, advice, books, tools, consultancy and training for IT governance, risk management, compliance and IT security objectives.
Sign In Required
Please sign in to book this course
Register interest
Enter your name and email to be notified when new dates are available. You can optionally add your phone number.
Select which organisation you would like to book for
Select Attendees to Book
Booking Summary
Free Course Summary
Register Interest Summary
- Course
- Course Title
- Notification
- You will be notified when this course becomes available for booking