Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Encryption and Key Administration
- Differences between symmetric and asymmetric encryption
- The role of keys in data encryption and authentication
- The importance of key administration for security and compliance
Key Lifecycle Oversight
- Generating and distributing keys
- Rotating keys and managing expiration
- Archiving keys and ensuring secure deletion
Access Control and Key Safeguards
- Applying role-based access to key operations
- Enforcing separation of duties and maintaining audit trails
- Utilizing Hardware Security Modules (HSMs)
Key Management Systems and Architectures
- Overview of commercial and open-source KMS options
- Designing architectures for secure key storage and administration
- Integrating KMS with existing applications and services
Cloud-Based Key Administration
- Managing keys in AWS, Azure, and Google Cloud
- Comparing Bring Your Own Key (BYOK) with Cloud-native keys
- Strategies for multi-cloud key administration
Compliance and Audit Processes
- Key administration requirements in PCI DSS, HIPAA, GDPR, and NIST
- Monitoring key usage and setting up alerting mechanisms
- Responding to incidents involving compromised keys
Case Studies and Recommended Practices
- Deploying key administration at enterprise scale
- Identifying common pitfalls and applying mitigation strategies
- Formulating an organizational key administration policy
Requirements
- Foundational knowledge of encryption and cryptographic principles
- Practical experience with IT infrastructure or security systems
- Basic familiarity with cloud environments is advantageous
Target Audience
- Security engineers
- IT administrators responsible for sensitive data
- Compliance and risk management professionals
Testimonials (2)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.