Objectives

The participant:

• Knows how to monitor their cloud room using various tools and how to avoid misconfigurations in the areas of Network Security, Identity and Access Management (IAM) and Data Security.
• Can detect security incidents and how to respond to them adequately.

Content

• Recap to BMW Cloud Security 1 Training | Threat Scenarios, CIA Model, Security Principles, Security at BMW.
• Security Monitoring to avoid misconfigurations | CSP Tools, Security Standards, Cloudroom Security Score.
• Prevent Network Access | BMW Network Architecture, Security Groups, Encryption in Transit.
• Prevent Unauthorized Access | Azure IAM: Roles & Policies.
• Prevent Application Security Issues | Security Best Practices, Vulnerability Scanning.
• Prevent Data Security Issues | Encryption at Rest.
• Detect and respond to Security Incidents | Monitoring & Auditing Tools, Cloud Security Posture Management (CPSM).
• Tipps and Tricks for Implementation, Good Practices.

Target Group

• Partner, who have a further understanding of the Cloud and want to deepen their knowledge about Cloud Security and Azure, independent of any specific technical role.

Good to know

• WBT - Cloud Basic 1 (ITEM_9175)  (self-learning).
• WBT - Cloud Basic 2 Azure (ITEM_71107) (self-learning).
• XLAB - BMW Cloud Potential Azure (ITEM_37012) or first practical experience with own Azure deployments.
• XLAB – BMW Cloud Security 1 - Azure (ITEM_70046).
• Be able to read and understand Source Code and familiar to work with Command Line Interfaces (i.e. Linux Bash).
• First experience with Cloud resources/services.
• First experience with Terraform CLI (optionally).
• Prior knowledge is checked on the participant's own responsibility.
• If you have further questions regarding Cloud Trainings, you can contact us: cloudtrainings@bmw.de