ISO 27017: Information Security Controls for Cloud Services Training Course
ISO/IEC 27017 is an international standard offering guidelines for information security controls tailored specifically to cloud services. It expands upon ISO/IEC 27002, strengthening security measures for cloud computing environments.
This instructor-led, live training (available online or on-site) targets intermediate IT and security professionals aiming to implement ISO 27017 controls to improve cloud security and regulatory compliance.
Upon completion of this training, participants will be capable of:
- Grasping the principles and objectives of ISO 27017.
- Recognizing key security controls specific to cloud environments.
- Implementing ISO 27017 controls across cloud service providers and customers.
- Aligning cloud security strategies with ISO 27001 requirements.
- Ensuring adherence to international cloud security best practices.
Course Format
- Interactive lectures and discussions.
- Extensive exercises and practice sessions.
- Hands-on implementation in a live-lab environment.
Course Customization Options
- To request customized training for this course, please contact us to arrange.
Course Outline
Introduction to ISO 27017
- Overview of ISO/IEC 27017
- Relation to ISO 27001 and ISO 27002
- Importance of cloud security governance
Cloud Security Risks and Threats
- Common security risks in cloud environments
- Cloud-based attack vectors
- Risk assessment methodologies for cloud services
Key Information Security Controls in ISO 27017
- Additional cloud-specific controls
- Shared security responsibilities between CSPs and customers
- Data protection and encryption in the cloud
Implementing Cloud Security Policies
- Defining security policies for cloud adoption
- Access control and identity management
- Security incident management in the cloud
Compliance and Regulatory Considerations
- Legal and regulatory implications of cloud security
- Mapping ISO 27017 to GDPR, HIPAA, and other regulations
- Cloud compliance audits and certification processes
Best Practices for Cloud Security
- Security monitoring and threat detection
- Implementing continuous improvement in cloud security
- Ensuring resilience and disaster recovery
Hands-On Implementation and Case Studies
- Applying ISO 27017 controls in real-world scenarios
- Reviewing cloud security case studies
- Interactive exercises on cloud security strategy
Summary and Next Steps
Requirements
- Basic understanding of cloud computing
- Knowledge of general information security principles
- Familiarity with ISO 27001 or other cybersecurity frameworks
Target Audience
- Cloud security professionals
- IT security managers
- Compliance officers
- Cloud service providers
Open Training Courses require 5+ participants.
ISO 27017: Information Security Controls for Cloud Services Training Course - Booking
ISO 27017: Information Security Controls for Cloud Services Training Course - Enquiry
ISO 27017: Information Security Controls for Cloud Services - Consultancy Enquiry
Testimonials (1)
The attention to cover all doubts
Victor Rubio - GDL Circuits
Course - ISO 26262 Automotive Functional Safety
Upcoming Courses
Related Courses
GDPR - Certified Data Protection Officer
35 HoursThe PECB Certified Data Protection Officer training program empowers you with the essential knowledge, skills, and competence required to effectively fulfill the role of a Data Protection Officer within a GDPR compliance implementation.
Why should you attend?
As data protection gains increasing value, organizations face a growing imperative to safeguard this information. Non-compliance with data protection regulations not only violates fundamental rights and freedoms but can also expose an organization to significant risks, potentially damaging its credibility, reputation, and financial standing. This is where your expertise as a Data Protection Officer becomes critical.
This PECB Certified Data Protection Officer course equips you with the knowledge and skills needed to serve as a Data Protection Officer (DPO), thereby helping organizations ensure adherence to General Data Protection Regulation (GDPR) requirements.
Through practical exercises, you will master the DPO role, gaining the competence to inform, advise, and monitor GDPR compliance, as well as cooperate effectively with supervisory authorities.
Upon completing the training, you may sit for the exam. Successful candidates can apply for the 'PECB Certified Data Protection Officer' credential. This internationally recognized certificate validates your professional capability and practical knowledge to advise controllers and processors on meeting their GDPR obligations.
Who should attend?
- Managers or consultants aiming to support an organization in planning, implementing, and maintaining a GDPR-based compliance program
- Current DPOs and individuals responsible for maintaining GDPR conformance
- Members of information security, incident management, and business continuity teams
- Technical and compliance professionals preparing for a Data Protection Officer role
- Expert advisors focused on personal data security
Learning objectives
- Understand GDPR concepts and interpret its requirements
- Comprehend the content and relationship between the GDPR and other regulatory frameworks and standards, such as ISO/IEC 27701 and ISO/IEC 29134
- Acquire the competence to perform the DPO role and daily tasks within an organization
- Develop the ability to inform, advise, and monitor GDPR compliance, and cooperate with supervisory authorities
Educational approach
- This course combines theoretical foundations with best practices for exercising the DPO role.
- Lectures are supported by practical exercises based on case studies, including role-playing and discussions.
- Participants are encouraged to engage actively through communication, discussions, and exercises.
- Practice exercises and quizzes mirror the format of the certification exam.
General Information
- Participants receive course materials containing over 450 pages of explanatory content and practical examples.
- An Attendance Record granting 31 CPD (Continuing Professional Development) credits is issued to attendees.
Interpretation of Environmental Management System Standard ISO 14001:2015
24 HoursISO 14001:2015 serves as the global benchmark for establishing, putting into practice, and enhancing an Environmental Management System (EMS).
This instructor-led training session, available both online and onsite, is designed for professionals at beginner and intermediate levels who aim to comprehend, interpret, and implement the requirements of ISO 14001:2015 within their respective organizations.
After completing this workshop, participants will be capable of:
- Interpreting the structure, requirements, and underlying intent of ISO 14001:2015.
- Identifying environmental aspects and associated risks in accordance with the standard.
- Assessing the organizational context and the responsibilities of leadership.
- Evaluating operational controls, performance metrics, and improvement processes.
Course Format
- Guided presentations supported by real-world examples.
- Practical exercises, case studies, and scenario-based discussions.
- Interactive activities centered on interpreting and applying ISO 14001:2015 requirements.
Course Customization Options
- To tailor this course to your organization’s specific EMS needs, please contact us to discuss customization possibilities.
Applied Interpretation and Implementation of ISO 20560 for Industrial Safety Signage
21 HoursISO 20560 establishes a global framework for standardizing safety signage and pipeline marking within industrial settings.
This guided, live training session—available both online and on-site—is designed for experienced industrial and safety professionals seeking to implement ISO 20560 standards in practical operational contexts.
Upon finishing this training, participants will be able to:
- Accurately interpret the structure, terminology, and application guidelines of ISO 20560.
- Create and deploy compliant safety signage and pipeline identification systems.
- Evaluate risks linked to industrial substances and processes through standardized visual communication.
- Adapt ISO 20560 requirements to align with local regulations and specific sector demands, such as those in cosmetic manufacturing.
Course Format
- Presentations led by experts, accompanied by facilitated discussions.
- Scenario-based exercises and practical workshops.
- Practical assessment of signage and pipeline marking within simulated industrial environments.
Customization Options
- To tailor this course to your organization’s specific operational context or facility layout, please contact us to arrange a customized program.
ISO 10012:2003 – Measurement Management Systems
14 HoursThis instructor-led, live training in Sweden (online or onsite) is designed for intermediate-level quality and measurement professionals seeking to implement, audit, or enhance a measurement management system based on ISO 10012:2003, thereby supporting quality assurance and regulatory compliance.
Upon completion of this training, participants will be able to:
- Comprehend the structure, scope, and intent of ISO 10012:2003.
- Implement a measurement management system that guarantees equipment reliability and measurement traceability.
- Define the roles, responsibilities, and documentation necessary for measurement control.
- Integrate ISO 10012 with broader quality and risk management frameworks (e.g., ISO 9001, ISO/IEC 17025).
ISO 14001:2015 Internal Auditor of the Environmental Management System
35 HoursObjectives
- Gain in-depth knowledge of ISO 14001:2015
- Understand how to perform audits according to the standard
- Learn about established best practices
ISO 14001:2015 Requirements
14 HoursObjectives
- Gain insight into the ISO 14001 standard, 2015 edition
- Acquire knowledge on conducting audits in compliance with the standard
- Learn about best practices
ISO 19011:2018 Requirements
14 HoursObjectives
- Acquire a comprehensive understanding of the 2018 edition of ISO 19011.
- Learn how to conduct audits in alignment with the standard.
- Discover proven best practices.
ISO 22000 Certification: Food Safety Management Systems
14 HoursThis instructor-led, live training in Sweden (online or onsite) is aimed at intermediate-level to advanced-level professionals in the food industry who wish to understand, implement, and achieve ISO 22000 certification.
By the end of this training, participants will be able to:
- Understand the principles and requirements of ISO 22000.
- Implement a Food Safety Management System (FSMS).
- Identify and manage food safety hazards using HACCP principles.
- Prepare for ISO 22000 certification audits.
- Ensure compliance with international food safety regulations.
ISO 22301 Lead Implementer
35 HoursUpon completion of this training course, you will be eligible to sit for the exam. If you successfully pass, you can apply for the 'Certified ISO 22301 Lead Implementer' credential. This internationally recognised certificate demonstrates your professional competence and practical expertise in implementing a Business Continuity Management System (BCMS) in accordance with ISO 22301 requirements within an organisation.
Who should attend?
- Project managers and consultants engaged in business continuity
- Expert advisors aiming to master the implementation of a business continuity management system
- Professionals responsible for maintaining organisational conformity with BCMS requirements
- Members of a BCMS team
Learning objectives
- Develop a comprehensive understanding of the concepts, approaches, methods, and techniques used to implement and effectively manage a BCMS
- Learn to interpret and apply ISO 22301 requirements within the specific context of an organisation
- Understand the operation of a business continuity management system and its processes as defined by ISO 22301
- Acquire the necessary knowledge to support an organisation in planning, implementing, managing, monitoring, and continually improving a BCMS
Educational approach
- This training course is grounded in theory, implementation best practices, and the ISO 22301 requirements essential for BCMS implementation.
- Lectures are reinforced with practical exercises based on a case study, incorporating role-playing and discussions.
- Participants are encouraged to interact with one another and actively engage in discussions and exercises.
- The exercises mirror the format of the certification exam.
General Information
- Certification fees are included in the exam price. After completing the course, you can book your exam.
- Participants will receive training materials comprising over 450 pages of explanatory content and practical examples.
- An Attendance Record awarding 31 CPD (Continuing Professional Development) credits will be issued to attendees who complete the training course.
- Candidates who do not pass the exam may retake it within 12 months of the initial attempt at no additional cost.
ISO 26262 Automotive Functional Safety
28 HoursISO 26262 establishes the framework for functional safety within the automotive industry.
This instructor-led live training, available either online or onsite, is designed for automotive professionals aiming to introduce the ISO 26262 standard into their organizations.
Upon completing this training, participants will be equipped to:
- Grasp the concept of functional safety as it applies to the development of automotive hardware and software.
- Comprehend the legal obligations and compliance mandates associated with ISO 26262.
- Apply the safety processes outlined in ISO 26262.
Course Format
- Engaging lectures coupled with interactive discussions.
- Extensive exercises and practical activities.
- Practical implementation within a live laboratory environment.
Course Customization Options
- For tailored training on this subject, please get in touch with us to make arrangements.
ISO 26262 Part 6: Safe Software Development
7 HoursThis guided, live training in Sweden (online or in-person) is designed for automotive professionals who aim to implement the ISO 26262 standard within their organizations.
By the end of this training, participants will be able to:
- Establish complete and consistent software safety requirements.
- Analyze software architectures for safety, including freedom from interference (FFI) analysis.
- Build processes that use documentation tools to improve software quality.
- Plan and execute an integration test strategy for software and systems.
- Implement and test software units for safety applications.
ISO/IEC 27002 Introduction
7 HoursWhy attend this course?
The Introduction to ISO/IEC 27002 training course is designed to help you gain a thorough understanding of Information Security Management Systems (ISMS) and Information Security Controls, as outlined in ISO/IEC 27002.
By participating in this course, you will appreciate the significance of ISMS and Information Security Controls, as well as the advantages they offer to businesses, society, and government entities.
Who is this course for?
- Professionals interested in Information Security Management and Information Security Controls
- Individuals aiming to acquire knowledge regarding the core processes of Information Security Management Systems and Information Security Controls
Learning objectives
- Comprehend the information security standards and management practices utilized to implement and oversee Information Security Controls
- Identify the controls required to effectively manage information security risks
ISO 27002 Lead Manager
35 HoursISO/IEC 27002 Lead Manager training allows you to develop the necessary expertise and knowledge to support an organization in implementing and managing Information Security controls as specified in ISO/IEC 27002.
After completing this course, you can sit for the exam and apply for the “PECB Certified ISO/IEC 27002 Lead Manager” credential. A PECB Lead Manager Certification proves that you have mastered the principles and techniques for the implementation and management of Information Security Controls based on ISO/IEC 27002.
Who should attend?
- Managers or consultants seeking to implement an Information Security Management System (ISMS) based on ISO/IEC 27001 and ISO/IEC 27002
- Project managers or consultants seeking to master the Information Security Management System implementation process
- Individuals responsible for the information security, compliance, risk, and governance, in an organization
- Members of information security teams
- Expert advisors in information technology
- Information Security officers
- Privacy officers
- IT professionals
- CTOs, CIOs and CISOs
Learning objectives
- Master the implementation of Information Security controls by adhering to the framework and principles of ISO/IEC 27002
- Gain a comprehensive understanding of the concepts, approaches, standards, methods and techniques required for the effective implementation and management of Information Security controls
- Comprehend the relationship between the components of Information Security controls, including responsibility, strategy, acquisition, performance, conformance, and human behavior
- Understand the importance of information security for the strategy of the organization
- Master the implementation of information security management processes
- Master the formulation and implementation of security requirements and objectives
Educational approach
- This training is based on both theory and practice
- Sessions of lectures illustrated with examples based on real cases
- Practical exercises based on case studies
- Review exercises to assist the exam preparation
- Practice test similar to the certification exam
General Information
- Certification fees are included on the exam price
- Training material containing over 500 pages of information and practical examples will be distributed to the participants
- A participation certificate of 31 CPD (Continuing Professional Development) credits will be issued to the participants
- In case of exam failure, you can retake the exam within 12 months for free
ISO/IEC 27005 Lead Risk Manager
35 HoursThe PECB Certified ISO/IEC 27005 Lead Risk Manager training provides you with the essential expertise to assist organizations in managing risks associated with all assets relevant to Information Security, utilizing the ISO/IEC 27005 standard as a reference framework. Throughout this course, you will gain comprehensive knowledge of a process model designed for developing and implementing an Information Security Risk Management program. The curriculum also covers a deep understanding of best practices for risk assessment methodologies, including OCTAVE, EBIOS, MEHARI, and the harmonized Threat and Risk Assessment (TRA).
This training supports the implementation of the Information Security Management System (ISMS) framework outlined in the ISO/IEC 27001 standard. Upon mastering the key concepts of Information Security Risk Management based on ISO/IEC 27005, you may sit for the examination to apply for the “PECB Certified ISO/IEC 27005 Lead Risk Manager” credential. Holding this certificate demonstrates your practical knowledge and professional capability to support and lead teams in managing Information Security Risks.
Who should attend?
- Information Security risk managers
- Members of Information Security teams
- Professionals responsible for Information Security, compliance, and risk within an organization
- Individuals implementing or seeking to comply with ISO/IEC 27001, or those involved in risk management programs
- IT consultants
- IT professionals
- Information Security officers
- Privacy officers
Examination - Duration: 3 hours
The “PECB Certified ISO/IEC 27005 Lead Risk Manager” exam fully meets the requirements of the PECB Examination and Certification Programme (ECP). The exam assesses the following competency domains:
- Domain 1: Fundamental principles and concepts of Information Security Risk Management
- Domain 2: Implementation of an Information Security Risk Management program
- Domain 3: Information security risk assessment
- Domain 4: Information security risk treatment
- Domain 5: Information security risk communication, monitoring, and improvement
- Domain 6: Information security risk assessment methodologies
General Information
- Certification fees are included in the exam price
- Training material comprising over 350 pages of information and practical examples will be provided
- A participation certificate granting 21 CPD (Continuing Professional Development) credits will be issued
- If you do not pass the exam, you can retake it within 12 months at no additional cost
ISO 9001 and ISO 27001 – Interpretation and Internal Auditor
21 HoursISO 9001 and ISO 27001 are globally acknowledged standards for quality and information security management systems, respectively.
This instructor-led live training (available online or onsite) targets intermediate-level professionals seeking to interpret ISO 9001 and ISO 27001 standards and conduct internal audits with confidence.
Upon completing this training, participants will be able to:
- Grasp the core principles and requirements of ISO 9001 and ISO 27001.
- Interpret clauses and controls within practical, real-world contexts.
- Plan and execute internal audits that align with ISO standards.
- Identify nonconformities and recommend appropriate corrective actions.
Course Format
- Interactive lectures and group discussions.
- Simulated auditing exercises and case studies.
- Hands-on analysis of quality and security scenarios.
Customization Options
- To arrange a customized training session for this course, please contact us.