Get in Touch
 Duration 21 hours

Course Outline

Introduction to Encryption and Key Administration

  • Differences between symmetric and asymmetric encryption
  • The role of keys in data encryption and authentication
  • The importance of key administration for security and compliance

Key Lifecycle Oversight

  • Generating and distributing keys
  • Rotating keys and managing expiration
  • Archiving keys and ensuring secure deletion

Access Control and Key Safeguards

  • Applying role-based access to key operations
  • Enforcing separation of duties and maintaining audit trails
  • Utilizing Hardware Security Modules (HSMs)

Key Management Systems and Architectures

  • Overview of commercial and open-source KMS options
  • Designing architectures for secure key storage and administration
  • Integrating KMS with existing applications and services

Cloud-Based Key Administration

  • Managing keys in AWS, Azure, and Google Cloud
  • Comparing Bring Your Own Key (BYOK) with Cloud-native keys
  • Strategies for multi-cloud key administration

Compliance and Audit Processes

  • Key administration requirements in PCI DSS, HIPAA, GDPR, and NIST
  • Monitoring key usage and setting up alerting mechanisms
  • Responding to incidents involving compromised keys

Case Studies and Recommended Practices

  • Deploying key administration at enterprise scale
  • Identifying common pitfalls and applying mitigation strategies
  • Formulating an organizational key administration policy

Requirements

  • Foundational knowledge of encryption and cryptographic principles
  • Practical experience with IT infrastructure or security systems
  • Basic familiarity with cloud environments is advantageous

Target Audience

  • Security engineers
  • IT administrators responsible for sensitive data
  • Compliance and risk management professionals

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories