Programa del Curso
Introduction to Encryption and Key Management
- Symmetric vs asymmetric encryption
- Key usage in data encryption and authentication
- Why key management matters for security and compliance
Key Lifecycle Management
- Key generation and distribution
- Key rotation and expiration
- Key archival and secure deletion
Access Control and Key Protection
- Role-based access to key operations
- Separation of duties and audit trails
- Hardware Security Modules (HSMs)
Key Management Systems and Architectures
- Overview of commercial and open-source KMS
- Architecture for secure key storage and management
- Integrating KMS with applications and services
Cloud Key Management Practices
- Key management in AWS, Azure, and Google Cloud
- Bring Your Own Key (BYOK) vs Cloud-native keys
- Multi-cloud key management strategies
Compliance and Auditing
- Key management in PCI DSS, HIPAA, GDPR, and NIST
- Auditing key usage and implementing alerting
- Incident response for compromised keys
Case Studies and Best Practices
- Enterprise-scale key management deployment
- Common pitfalls and mitigation strategies
- Designing your organization’s key management policy
Summary and Next Steps
Requerimientos
- Understanding of basic encryption and cryptography concepts
- Experience working with IT infrastructure or security systems
- Familiarity with cloud environments is helpful
Audience
- Security engineers
- IT administrators managing sensitive data
- Compliance and risk professionals
Testimonios (5)
El hecho de que hubiera ejemplos prácticos con el contenido
Smita Hanuman - Standard Bank of SA Ltd
Curso - Basel III – Certified Basel Professional
Traducción Automática
El entrenador fue extremadamente claro y conciso. Muy fácil de entender y asimilar la información.
Paul Clancy - Rowan Dartington
Curso - CGEIT – Certified in the Governance of Enterprise IT
Traducción Automática
El entrenador estaba muy motivado y conocedor. No solo era capaz de transmitir información, sino que también lo hacía con humor para aligerar el tema teórico y seco del entrenamiento.
Marco van den Berg - ZiuZ Medical B.V.
Curso - HIPAA Compliance for Developers
Traducción Automática
I genuinely was benefit from the communication skills of the trainer.
Flavio Guerrieri
Curso - CISM - Certified Information Security Manager
Traducción Automática
I genuinely enjoyed the real examples of the trainer.
Joana Gomes
Curso - Compliance and the Management of Compliance Risk
Traducción Automática