VU22242 - Assess and secure cloud services

Unit code: VU22242 | Study level: TAFE

Credit points

N/A

Location

Footscray Nicholson

St Albans

Prerequisites

N/A

Overview

This unit introduces learners to the principles and operation of the cloud model and cloud services. It provides the knowledge and skills to categorise and select cloud services for an organisation as well as the ability to examine the security issues relating to cloud data and services.The unit also introduces the current industry practices that support an organisation to secure its’ cloud based data and application services

Assessment

For Melbourne campuses

Assessment tasks will be designed to reinforce and extend knowledge and skill competence within set and controlled parameters in accordance with each unit’s learning outcomes and performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:
• Articulating relevant issues encountered in the work environment
• Reading and accurately interpret documents and reports
• Determining changes required to work practices to implement new policies and procedures
• Assembling, participating in and coordinating a work team
• Problem solving within a team environment
• Evaluating the performance of a work team
• Contributing to the process of enhancing team performance
• Establishing project risk assessment
• Gathering, testing and allocating project resources
• Preparing technical documentation
• Making presentation to clients
• Interpreting data output from software packages
• Working as part of a team
• Securing cloud services
• Auditing and monitoring cloud services
• Assessing cloud based risk
• Using tools to access cloud based data and employing strategies to secure data
• Evaluating new technologies relating to cloud data and services

Students will also be expected to demonstrate the following knowledge:
• Cloud based storage architectures (IaaS, PaaS, SaaS, CaaS, MaaS, XaaS)
• Cloud deployment models (public cloud, private cloud, single hosted cloud, multi hosted cloud)
• Cloud based risk assessment
• Cloud infrastructure (storage, network and computing)
• Cloud management and monitoring
• Micro-services and containers (docker) in the cloud
• Backup and data recovery (DR) aspects of cloud services
• Government certification, accreditation and compliance implications of cloud services
• Data privacy issues of cloud services
• Options of cryptographic key management when using cloud services
• Risk assessment of cloud based data and services
• Data vulnerabilities of cloud based data storage
• Tools used to access cloud data and their limitations
• Service management principles to deal with cloud based data
• Strategies for protecting data in transit and at rest
• Secure backup strategies
• Legal and regulatory implications associated with using cloud based data storage (e.g. Records retention requirements)
• Data sovereignty risks associated with cloud storage
• Data protection dependencies (e.g. Effective key management processes)

Required reading

The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by the Polytechnic and/or via the Polytechnic e-learning system.