Course Outline
Foundations of Encryption and Key Administration
- Distinguishing between symmetric and asymmetric encryption
- Utilisation of keys for data encryption and authentication
- The critical role of key administration in security and compliance
Key Lifecycle Governance
- Processes for key generation and secure distribution
- Strategies for key rotation and expiration
- Archiving keys and ensuring secure deletion
Access Control and Key Safeguards
- Implementing role-based permissions for key operations
- Enforcing separation of duties and maintaining audit trails
- Utilising Hardware Security Modules (HSMs)
Key Management Systems and Architectural Design
- Survey of commercial and open-source KMS solutions
- Designing architectures for secure key storage and oversight
- Integrating KMS with various applications and services
Key Administration in Cloud Environments
- Managing keys within AWS, Azure, and Google Cloud
- Comparing Bring Your Own Key (BYOK) approaches with cloud-native keys
- Strategies for managing keys across multiple clouds
Regulatory Compliance and Audit Practices
- Addressing key administration requirements in PCI DSS, HIPAA, GDPR, and NIST
- Monitoring key usage and establishing alerting mechanisms
- Response protocols for compromised keys
Case Studies and Industry Best Practices
- Deploying key administration at an enterprise scale
- Identifying common pitfalls and effective mitigation techniques
- Formulating your organisation’s key administration policy
Conclusion and Recommended Next Steps
Requirements
- A solid grasp of fundamental encryption and cryptographic principles
- Practical experience with IT infrastructure or security systems
- Prior exposure to cloud environments is advantageous
Intended Audience
- Security engineers
- IT administrators responsible for sensitive data
- Compliance and risk management professionals
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3900 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
Speed of response and communication