Data Security and Encryption

00:01

this module is all about data security and encryption. We're gonna cover security controls in different storage types, will go into managing data migrations, and we'll talk about securing the data once it's been migrated into the cloud will review specifics of I s pass and SAS encryptions, different techniques you want to employ

00:21

based on the different environment and type there.

00:24

They will talk about key management, customer key management provider, key management

00:29

and well rounded out looking at architecture considerations, monitoring capabilities and discussing additional controls that you can leverage and put in place to keep that data in. The cloud secure

00:45

for the remainder of this video will focus on data security controls and data storage types.

00:52

There are three main components to data security controls in the cloud.

00:56

First and foremost, you need to determine which data is allowed to be stored in the cloud.

01:00

We previously spoke about establishing data classifications based on your legal and regulatory compliance requirements, taking into account any jurisdiction constrains or storage media limitations.

01:12

This classification will drive the most fundamental question for you should the day to be stored in the cloud based on his classification, or should it be excluded from the cloud.

01:23

At that point, you have certain classifications of data in the cloud, and you need to protect and manage it.

01:29

This involves establishing a secure architecture, establishing proper access controls, using encryption, compromise detection and employing other security controls,

01:38

many of which we will talk about in this module.

01:42

And finally you need to enforce to ensure that all the necessary security controls are being complied with.

01:48

This includes establishing audit, logging as well as backups and disaster recovery mechanisms.

01:53

The C S. A guidance classifies data storage into four different types.

01:57

First, we'll talk about object storage. This storage type is presented like a file system and is usually accessible via AP eyes or a front end interface, which is a Web or a specific client. Software

02:10

files, which are considered objects, can be made accessible to multiple systems simultaneously.

02:16

When you read about unintended data leakage in the cloud, more often than not, it's the result of object storage and the access controls, unintentionally exposing it to the public Internet or to an audience beyond which it should be.

02:30

Examples of common object storage include Amazon s three. Microsoft deserve storage blobs and Google Cloud Storage Service

02:37

Moving forward. Let's talk about volume storage this storage medium, such as a hard drive that you attach to your server. Instance. Generally, a volume could be attached only to a single VM server. Instance at a time it's basically the hard drive for your virtual machine continuing. We talk about the database storage

02:54

concerts. Providers may offer customers a wide variety of database types, including commercial and open source options.

03:00

Quite often, providers will also offer proprietary databases with their own AP eyes thes databases air hosted by the provider and use existing standards for connectivity. Databases offered could be relation alot, or non relational. Examples of non relational databases include no sequel,

03:19

other key value storage systems

03:22

and file based databases such as Hadoop H DFS. Last but not least, we have application platform. This storage is managed by the provider. Examples of application platform storage include content delivery networks, where they're cashing static files at the edge of different areas throughout the global Internet

03:39

or files stored in his software as a service application

03:44

such as ah CRM system like salesforce or a common document collaboration system like Box,

03:51

Let's have a quiz and we'll pull on some of the information we've covered in previous modules just to make sure you don't forget, as it's pretty pertinent to the material that we're also covering right now. Which of the following is the best way to determine whether or not data should be stored in the cloud security policies, privacy policies, information classification,

04:10

data security, lifecycle or an acceptable use policy?

04:14

Think about it for a second, and the answer is C. We talked about this early on in this video is, well, information classification, security policies, privacy policies, those air going to drive your information classifications categories, and they're going to determine what you can do with data that sits into certain classifications.

04:31

But ultimately it's information classifications at you're going to rely on. That's gonna be the