Cloud Computing in the GC: The SA&A Process

Overview

Delivery method

Virtual classroom

Duration

3.5 hours

Audience

All SSC employees at all levels

Description

​As a next step following Course – Introduction to Cloud in the GC, this workshop aims to refine cloud computing concepts, and establish a deeper understanding of the Cloud Computing SA&A Process within a GC context. The advice and guidance provided in this workshop will explore Cloud Service Provider Assessments and risk management decisions when procuring a public cloud service, GC Cloud Usage Profiles, GC Accelerators, Guardrails and general Cloud Security Guidance. This will help GC personnel identify their own organization’s needs, and create a structured approach for managing risks that accounts for the incorporation of cloud services to support their own program goals and outcomes.

Learning Objectives

By the end of this course, you will be able to:

• Conduct Cloud Service Provider Assessments;
• Apply the Risk Management Process for cloud adoption in a GC context;
• Understand and use the CCCS Medium Security Profile and Playbook;
• Leverage GC Cloud Usage Profiles, GC Accelerators, and Guardrails;
• Apply GC Cloud Security Guidance to support program goals and outcomes.

Target Audience

​GC employees at all levels who already have a good understanding of Cloud Computing and SA and A process within the government.

Prerequisite(s)

Prior to attending, participants are required to take course 115 - Foundations of cloud security in the Government of Canada or via SSC Campus: Foundations of Cloud Security in the Government of Canada.

It is also recommended that participants read the following document: Cloud service provider Information Technology security assessment process (ITSM.50.100).