Auditing VMware vSphere 4.x, Private Clouds & Cloud Based Services

    

Summary:
'In- depth virtualization & cloud expertise, delivered in the IT Audit & Risk Language'While organizations are embracing Virtualization and Cloud Services, the uncertainty and concerns surrounding risk and compliance impact remains. How does IT deliver on the agility requested by business, whilst ensuring the provision of this agility is not detrimental to their enterprise's risk posture? Are current policies kept being reinforced? How to prove that data is handled securely, while cloud service providers maintain their 'black box' as this is exactly where their IP rests? There are a lot of questions and only a handful of guidelines available. Those guidelines all start by warning its readers to not attempt to use them as they would lack the necessary skills to perform these tasks.This course slices through the hyperbole, takes in- depth virtualization & cloud expertise and delivers it in the IT- Audit & Risk language. The training opens the deep Risk- and Audit- specific aspects of virtual infrastructures & cloud services and tests them against existing & emerging guidelines, industry standards, techniques and tools. The course approaches Virtual Assurance from different angles and takes a case study and hands on driven approach, using mock virtualized and 'cloudified' information systems and virtual assets in a data center,.Training includes/ covers:-Official Courseware (500+ pages)-Detailed Lab Manuals with over 40 exercises that have been created on an actual data center-SAS 70, ENISA, ISO, ISACA, NIST, PCI DSS, vSphere 4.1 Hardening Guidelines, Cloud Security Alliance-The 4 day training prepares for the Virtualization Audit Professional exam and the Virtualization & Cloud Computing Audit Professional examExams:The test for students that attend this 4-day training (Virtualization & Cloud Computing Audit Professional) covers 60 questions. The passing rate for this exam is 75% overall and 75% of the Cloud related questions. Students have 75 minutes to finish their test.Standards, Audit Initiatives & Models Covered:(-) SAS 70 (-) ENISA (-) ISO 27001(-) ISACA VMware Audit Guidelines (-) NIST (-) CSA(-) PCI DSS 2.0 (-) vSphere 4.1 Hardening Guidelines(-) Cloud Security Alliance Guidelines(-) ISACA's Cloud Computing Management Audit/ Assurance Program

Duration:
4 Days/Lecture & Lab

Audience:
This class is designed for IT Auditor, IT Risk Manager, IT Compliance Officer, and Information Security & IT Architects.

Topics:

• Understand the essential "under-the-hood" differences between virtual and traditional (physical) appliances, servers and networks and how they affect standard information system audit techniques and tools;
• Learn about inherent risk that is associated with the virtualization of enterprise components and cloud based services. Identify vulnerabilities & threats. Design, develop and implement mitigating controls.
• Create risk- directed audit projects for virtual environments, private clouds and external Cloud Based Services. Design, develop and monitor metrics and audit for their presence and effectiveness.
• Understanding how your house is built
• Auditing the House that you Own VMware vSphere 4.x & Private Clouds
• Auditing your Landlord External Cloud Based Services

Last Update: May 18, 2012