Cloud Security & Governance

What you will be able to do

• Apply the shared responsibility model across AWS, Azure and Google Cloud
• Design cloud identity, data protection and network security controls
• Run cloud posture management (CSPM), logging and detection
• Map NIST, CMMC, FedRAMP and ISO 27001 controls onto cloud services
• Govern cloud with policy-as-code and collect audit evidence
• Walk through a cloud security assessment end to end

What is inside

6 modules, 17 lessons. Each module ends in a graded quiz.

1. 01

   Cloud Security Foundations

   Build the mental model every cloud security and GRC professional needs before touching a single control. You will learn how the shared responsibility model shifts across AWS, Azure, and Google Cloud and by service type, why misconfiguration and identity now drive cloud risk, and how core principles like defense in depth, least privilege, and zero trust apply in practice. You will also map your existing GRC and audit skills directly onto cloud work so you can contribute on day one.

   3 lessons · 12 quiz questions

2. 02

   Identity & Access in the Cloud

   In the cloud, identity is the real perimeter, and getting it right is the single highest-leverage thing you can do for security and compliance. This module teaches cloud IAM across AWS, Microsoft Entra ID, and Google Cloud: how users, groups, roles, and policies work; how to design least-privilege access; how federation, single sign-on, privileged access, and break-glass fit together; and how to manage service identities and keys. You will finish able to spot the identity misconfigurations that cause most cloud breaches and explain the controls in the GRC language your auditors already speak.

   3 lessons · 12 quiz questions

3. 03

   Data Protection & Network Security

   This module shows you how to protect data and lock down networks across AWS, Azure, and Google Cloud. You will learn encryption at rest and in transit, key and secrets management with envelope encryption and customer-managed keys, data classification, and cloud network controls including segmentation, security groups, private connectivity, egress control, WAF, and DDoS protection. Throughout, you will tie each control back to the GRC and compliance evidence auditors expect.

   3 lessons · 12 quiz questions

4. 04

   Posture Management, Logging & Detection

   You will learn how to keep a multi-cloud environment continuously secure after it is built: spotting risky configurations with CSPM, applying CIS Benchmarks and baselines, and turning on the logging that proves what happened. You will also build the detection, alerting, and incident response habits that catch attacks early, then practice finding and fixing the misconfigurations that cause most cloud breaches. Examples run across AWS, Azure, and Google Cloud and tie back to the GRC frameworks you already know.

   3 lessons · 12 quiz questions

5. 05

   Cloud Compliance & Governance

   This module shows you how to map the control frameworks you already know, NIST 800-53 and CSF, CMMC, FedRAMP, ISO 27001, and SOC 2, onto AWS, Azure, and Google Cloud. You will learn how providers split responsibility through inherited, shared, and customer controls, how to enforce guardrails with policy-as-code, and how to collect audit evidence automatically. Throughout, you follow Northwind Health, a fictional company taking a regulated workload multi-cloud, as it operationalizes governance.

   3 lessons · 12 quiz questions

6. 06

   Capstone & Career Readiness

   Pull everything together by running a full cloud security assessment end to end, from scoping a multi-cloud environment to delivering an evidence pack and a prioritized remediation plan. You will also learn what the Cloud Security and Cloud Compliance Analyst role actually involves day to day, and how this course maps to the AWS, Azure, and Google Cloud certifications that hiring managers look for.

   2 lessons · 20 quiz questions