Get startedGet started for free

Home
Courses
Strategies for Cloud Security Risk Management

Use reports to remediate findings

This exercise is part of the course

Strategies for Cloud Security Risk Management

Exercise instructions

Remediate threats detailed in a management report

This exercise is part of the course

Strategies for Cloud Security Risk Management

IntermediateSkill Level

0.0+

Start Course for Free

Introduction to frameworks within security domainsIn this module, you’ll dive into the essential concepts of security domains, compliance frameworks, data privacy fundamentals, risk and security controls. You'll understand the key differences between security and compliance, and learn about controls and frameworks within the three pivotal areas of compliance: people, process, and technology. This module offers you the opportunity to explore risk and security controls in depth, giving you a clear view of how these controls are effectively implemented.

Exercise 1: Introduction to Course 2 Exercise 2: Course 2 overview Exercise 3: Preston: Continuous growth in cloud security Exercise 4: Helpful resources and tips Exercise 5: Lab technical tips Exercise 6: Explore your course 2 scenario: Cymbal Bank Exercise 7: Welcome to module 1 Exercise 8: Introduction to cloud security domains Exercise 9: Explore compliance and security Exercise 10: Learn more about security and compliance with Google whitepapers Exercise 11: Phil: A day in the life of a Chief Information Security Officer Exercise 12: Test your knowledge: Security domains and compliance — Question 1 Exercise 13: Test your knowledge: Security domains and compliance — Question 2 Exercise 14: Test your knowledge: Security domains and compliance — Question 3 Exercise 15: Test your knowledge: Security domains and compliance — Question 4 Exercise 16: Security controls and compliance Exercise 17: Learn more about security controls Exercise 18: Risk and compliance Exercise 19: Test your knowledge: Risk, security controls, and compliance — Question 1 Exercise 20: Test your knowledge: Risk, security controls, and compliance — Question 2 Exercise 21: Test your knowledge: Risk, security controls, and compliance — Question 3 Exercise 22: Test your knowledge: Risk, security controls, and compliance — Question 4 Exercise 23: The three areas of compliance: People, process, and technology Exercise 24: Use existing frameworks to demonstrate compliance Exercise 25: Overview of the Google Cloud Security Command Center Exercise 26: Test your knowledge: Compliance and risk management — Question 1 Exercise 27: Test your knowledge: Compliance and risk management — Question 2 Exercise 28: Test your knowledge: Compliance and risk management — Question 3 Exercise 29: Test your knowledge: Compliance and risk management — Question 4 Exercise 30: Cloud security controls Exercise 31: Explore steps to implement security controls Exercise 32: Control mapping for risk management Exercise 33: Security control implementation Exercise 34: Test your knowledge: Security control mapping and implementation — Question 1 Exercise 35: Test your knowledge: Security control mapping and implementation — Question 2 Exercise 36: Test your knowledge: Security control mapping and implementation — Question 3 Exercise 37: Test your knowledge: Security control mapping and implementation — Question 4 Exercise 38: Wrap-up Exercise 39: Glossary terms from module 1 Exercise 40: Module 1 challenge — Question 1 Exercise 41: Module 1 challenge — Question 2 Exercise 42: Module 1 challenge — Question 3 Exercise 43: Module 1 challenge — Question 4 Exercise 44: Module 1 challenge — Question 5 Exercise 45: Module 1 challenge — Question 6 Exercise 46: Module 1 challenge — Question 7 Exercise 47: Module 1 challenge — Question 8 Exercise 48: Module 1 challenge — Question 9 Exercise 49: Module 1 challenge — Question 10

In this module, you’ll delve deeper into risk management frameworks, regulations, and industry standards, including NIST CSF, SOC 2, FedRAMP, HIPAA, and ISO 27001. You'll have the opportunity to compare and contrast these frameworks, standards, and regulations. Additionally, you'll learn how to effectively use these frameworks to establish controls and manage risks, ensuring compliance with various obligations.

Exercise 1: Welcome to module 2 Exercise 2: MK: Risk management in a cloud-first world Exercise 3: Introduction to risk management frameworks Exercise 4: Risk management and security frameworks Exercise 5: Compare and contrast risk management frameworks Exercise 6: Google’s Secure AI Framework Exercise 7: Test your knowledge: Risk management frameworks — Question 1 Exercise 8: Test your knowledge: Risk management frameworks — Question 2 Exercise 9: Test your knowledge: Risk management frameworks — Question 3 Exercise 10: Test your knowledge: Risk management frameworks — Question 4 Exercise 11: Test your knowledge: Risk management frameworks — Question 5 Exercise 12: Data protection and privacy Exercise 13: Learn more about data protection and privacy regulations Exercise 14: Data protection and privacy scenarios Exercise 15: Test your knowledge: Data protection and privacy regulations — Question 1 Exercise 16: Test your knowledge: Data protection and privacy regulations — Question 2 Exercise 17: Test your knowledge: Data protection and privacy regulations — Question 3 Exercise 18: Test your knowledge: Data protection and privacy regulations — Question 4 Exercise 19: Industry-specific regulations and standards Exercise 20: Security frameworks, regulations, laws, and standards Exercise 21: Apply industry-specific requirements Exercise 22: Test your knowledge: Differences between and applications of industry regulations — Question 1 Exercise 23: Test your knowledge: Differences between and applications of industry regulations — Question 2 Exercise 24: Test your knowledge: Differences between and applications of industry regulations — Question 3 Exercise 25: Test your knowledge: Differences between and applications of industry regulations — Question 4 Exercise 26: Risk management industry standards Exercise 27: What is Google Cloud Risk Manager?Exercise 28: Test your knowledge: Industry standards — Question 1 Exercise 29: Test your knowledge: Industry standards — Question 2 Exercise 30: Test your knowledge: Industry standards — Question 3 Exercise 31: Wrap-up Exercise 32: Glossary terms from module 2 Exercise 33: Module 2 challenge — Question 1 Exercise 34: Module 2 challenge — Question 2 Exercise 35: Module 2 challenge — Question 3 Exercise 36: Module 2 challenge — Question 4 Exercise 37: Module 2 challenge — Question 5 Exercise 38: Module 2 challenge — Question 6 Exercise 39: Module 2 challenge — Question 7 Exercise 40: Module 2 challenge — Question 8 Exercise 41: Module 2 challenge — Question 9 Exercise 42: Module 2 challenge — Question 10

Recognize and define controls, including compensating controls and the control mapping process.

Exercise 1: Welcome to module 3 Exercise 2: Overview of compliance lifecycle Exercise 3: Cloud security controls Exercise 4: Control mapping Exercise 5: Learn more about controls for workloads and services Exercise 6: Activity: Review a compliance report Exercise 7: Activity Quiz: Review a compliance report — Question 1 Exercise 8: Activity Quiz: Review a compliance report — Question 2 Exercise 9: Activity Quiz: Review a compliance report — Question 3 Exercise 10: Activity Quiz: Review a compliance report — Question 4 Exercise 11: Activity Quiz: Review a compliance report — Question 5 Exercise 12: Activity Exemplar: Review a compliance report Exercise 13: Test your knowledge: Control mapping — Question 1 Exercise 14: Test your knowledge: Control mapping — Question 2 Exercise 15: Test your knowledge: Control mapping — Question 3 Exercise 16: Test your knowledge: Control mapping — Question 4 Exercise 17: Test your knowledge: Control mapping — Question 5 Exercise 18: Cloud security audits Exercise 19: Audits and security assessments Exercise 20: Prepare for an audit Exercise 21: Test your knowledge: Assessments and auditing — Question 1 Exercise 22: Test your knowledge: Assessments and auditing — Question 2 Exercise 23: Test your knowledge: Assessments and auditing — Question 3 Exercise 24: Test your knowledge: Assessments and auditing — Question 4 Exercise 25: Test your knowledge: Assessments and auditing — Question 5 Exercise 26: Cloud security control inheritance Exercise 27: Cloud resource hierarchy and security controls Exercise 28: Best practices for Google Cloud resource hierarchy Exercise 29: Test your knowledge: Control inheritance and resource hierarchy — Question 1 Exercise 30: Test your knowledge: Control inheritance and resource hierarchy — Question 2 Exercise 31: Test your knowledge: Control inheritance and resource hierarchy — Question 3 Exercise 32: Test your knowledge: Control inheritance and resource hierarchy — Question 4 Exercise 33: Test your knowledge: Control inheritance and resource hierarchy — Question 5 Exercise 34: Negative organizational impacts of non-compliance Exercise 35: Policy as code and infrastructure as code Exercise 36: Key considerations when writing policy as code Exercise 37: Activity: Review and update a risk management policy Exercise 38: Activity Quiz: Review and update a risk management policy — Question 1 Exercise 39: Activity Quiz: Review and update a risk management policy — Question 2 Exercise 40: Activity Quiz: Review and update a risk management policy — Question 3 Exercise 41: Activity Quiz: Review and update a risk management policy — Question 4 Exercise 42: Activity Exemplar: Review and update a risk management policy Exercise 43: Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 1 Exercise 44: Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 2 Exercise 45: Test your knowledge: Compliance, policy as code, and infrastructure as code — Question 3 Exercise 46: Wrap-up Exercise 47: Glossary terms from module 3 Exercise 48: Module 3 challenge — Question 1 Exercise 49: Module 3 challenge — Question 2 Exercise 50: Module 3 challenge — Question 3 Exercise 51: Module 3 challenge — Question 4 Exercise 52: Module 3 challenge — Question 5 Exercise 53: Module 3 challenge — Question 6 Exercise 54: Module 3 challenge — Question 7 Exercise 55: Module 3 challenge — Question 8 Exercise 56: Module 3 challenge — Question 9 Exercise 57: Module 3 challenge — Question 10

In this module, you'll navigate key cloud tools and their applications in risk and compliance, focusing on tools like Google's Security Command Center, Risk Manager, and Policy Analyzer, as well as cloud security posture management (CSPM). You'll learn how these tools, along with risk protection programs and organizational policies, are used for compliance and risk mitigation, and explore compliance frameworks like CIS, NIST, and ISO, and MITRE in risk management and security standards.

Exercise 1: Welcome to module 4 Exercise 2: Vulnerability management frameworks Exercise 3: Vulnerability management Exercise 4: Test your knowledge: Risk and compliance frameworks — Question 1 Exercise 5: Test your knowledge: Risk and compliance frameworks — Question 2 Exercise 6: Test your knowledge: Risk and compliance frameworks — Question 3 Exercise 7: Test your knowledge: Risk and compliance frameworks — Question 4 Exercise 8: Introduction to multicloud CSPMs Exercise 9: Security Command Center Exercise 10: Cloud security management (CSPM) resources Exercise 11: Test your knowledge: CSPMs — Question 1 Exercise 12: Test your knowledge: CSPMs — Question 2 Exercise 13: Test your knowledge: CSPMs — Question 3 Exercise 14: Test your knowledge: CSPMs — Question 4 Exercise 15: Security Command Center, Risk Manager, Policy Analyzer, Assured Workloads Exercise 16: Cloud tools for risk management Exercise 17: Guide to risk assessment and compliance management with Security Command Center Exercise 18: Use reports to remediate findings

Current Exercise

Exercise 19: Test your knowledge: Security Command Center — Question 1 Exercise 20: Test your knowledge: Security Command Center — Question 2 Exercise 21: Test your knowledge: Security Command Center — Question 3 Exercise 22: Test your knowledge: Security Command Center — Question 4 Exercise 23: Understand Google Cloud’s Risk Protection Program Exercise 24: The value of shared fate in cloud risk protection programs Exercise 25: Digital sovereignty and sovereign clouds Exercise 26: Test your knowledge: Risk protection programs — Question 1 Exercise 27: Test your knowledge: Risk protection programs — Question 2 Exercise 28: Test your knowledge: Risk protection programs — Question 3 Exercise 29: Test your knowledge: Risk protection programs — Question 4 Exercise 30: Organizational policies in the cloud Exercise 31: Organization Policy Service Exercise 32: Organizational policy constraints, inheritance and violation Exercise 33: Test your knowledge: Organizational policies — Question 1 Exercise 34: Test your knowledge: Organizational policies — Question 2 Exercise 35: Test your knowledge: Organizational policies — Question 3 Exercise 36: Test your knowledge: Organizational policies — Question 4 Exercise 37: Wrap-up Exercise 38: Patrick and Danielle: Interview role play Exercise 39: Interview tip: provide examples Exercise 40: Glossary terms from module 4 Exercise 41: Module 4 challenge — Question 1 Exercise 42: Module 4 challenge — Question 2 Exercise 43: Module 4 challenge — Question 3 Exercise 44: Module 4 challenge — Question 4 Exercise 45: Module 4 challenge — Question 5 Exercise 46: Module 4 challenge — Question 6 Exercise 47: Module 4 challenge — Question 7 Exercise 48: Module 4 challenge — Question 8 Exercise 49: Module 4 challenge — Question 9 Exercise 50: Module 4 challenge — Question 10 Exercise 51: Course wrap-up Exercise 52: Course 2 resources and citations Exercise 53: Glossary terms from course 2