Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Encryption and Key Management
- Distinctions between symmetric and asymmetric encryption
- The role of keys in data encryption and authentication processes
- The critical importance of key management for maintaining security and compliance
Key Lifecycle Management
- Processes for generating and distributing keys
- Strategies for rotating and expiring keys
- Archiving and securely deleting keys
Access Control and Key Protection
- Implementing role-based access for key operations
- Establishing separation of duties and maintaining audit trails
- Utilising Hardware Security Modules (HSMs)
Key Management Systems and Architectures
- Overview of commercial and open-source KMS options
- Architectural approaches for secure key storage and management
- Integrating KMS with existing applications and services
Cloud Key Management Practices
- Key management across AWS, Azure, and Google Cloud
- Comparison of Bring Your Own Key (BYOK) and cloud-native key methods
- Strategies for multi-cloud key management
Compliance and Auditing
- Aligning key management with PCI DSS, HIPAA, GDPR, and NIST standards
- Auditing key usage and setting up alerting mechanisms
- Incident response procedures for compromised keys
Case Studies and Best Practices
- Deploying key management at an enterprise scale
- Identifying common pitfalls and applying mitigation strategies
- Crafting a key management policy tailored to your organisation
Requirements
- Foundational understanding of encryption and cryptography concepts
- Experience managing IT infrastructure or security systems
- Familiarity with cloud environments is advantageous
Target Audience
- Security engineers
- IT administrators responsible for sensitive data
- Compliance and risk professionals
Testimonials (2)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
