Overview of Risk ManagementKey Concepts in Risk ManagementRisk Management in Cloud EnvironmentsIaaSPaaSSaaSDistinction between Cloud Service Models and Deployment Models (Public, Private, Hybrid, and Community)CybersecurityImportance of Risk Management in Cloud ComputingThe Outsourcing ModelVendor-Lock InData Residency – Processing, Storage, and Transfer ConsiderationsAccess to ResourcesResources that are not persistent (ephemeral)Risk Identification and AnalysisRisk FrameworksAssessing the CSP’s RiskSLAsIdentifying Cloud Security RisksTools and Practices for Identifying Risks in Cloud EnvironmentsRisk Assessments and ToolsExternal Third-Party AssessmentsAnalyzing and Assessing Cloud Security RisksQualitative versus Quantitative Risk Analysis MethodsTools and Frameworks for Cloud Risk AssessmentsCloud Attack Surface Area, Vulnerabilities, Threats, and Attack VectorsCloud Attack Surface and VulnerabilitiesHypervisorDirect Connections from Remote DevicesThreats, Attack Vectors, and Incident Response (IR) in CloudIR Planning for Cloud EnvironmentsRisk Response StrategiesAddressing Cloud Security Risks – Safeguards and CountermeasuresData Breaches and Data LossNon-Authorized AccessAdministrative ConcernsVirtualization RisksRegulatory Non-ComplianceDistributed Denial of Service (DDoS) AttacksMan-in-the-Middle AttacksVendor IssuesShadow ITNatural DisastersInsider ThreatsInsecure APIsMisconfigurationsForensic Challenges in Cloud Environments and SolutionsImplementing Cloud Security Best Practices, Controls and CountermeasuresBest PracticesControlsData Encryption and Protection Techniques in the CloudIAM in Cloud EnvironmentsInformation Rights Management (IRM) / Digital Rights Management (DRM)VirtualizationNetwork SegmentationFirewalls and Other DevicesDLP Tools / Egress MonitoringSummaryExam Readiness Drill – Chapter Review QuestionsExam Readiness DrillATTEMPT 1ATTEMPT 2ATTEMPT 3Working On Timing