Security Architect

Lesson 1: IAM Access Control Models and AWS  

• Identify and justify the correct access control model given a scenario  
• Define and employ RBAC and determine the use case in which it should be employed  
• Define and employ ABAC and evaluate the benefits of its use in given scenarios 

Lesson 2: Building Access Control Matrix and Mapping Permissions  

• Identify access control components  
• Translate access control components for requirements  
• Create access control matrix from predefined requirements  

Lesson 3: Building Organisational Role Structure  

• Create IAM roles from subjects in access control matrix  
• Create scoped IAM policies from permissions in access control matrix  
• Create IAM restrictions from restrictions defined in access control matrix  

Lesson 4: Building Organisational Role and Access Visualisation  

• Identify elements and resources to be visualised from the access control matrix  
• Create visualisations for IAM roles  
• Create visualisations for IAM policies  
• Create visualisations for each resource and permissions  

Lesson 5: Enforcing IAM Policy Configurations  

• Identify and employ use cases for AWS Config  
• Evaluate IAM requirements from the access control matric that must be enforced  
• Create AWS Config rules for alerting on non-compliant IAM policies  

 Lesson 1: Infrastructure and Network Security Architecture Planning and Design  

• Understand framework types and implement them to security problems  
• Build network boundaries and define access types for the infrastructure  
• Map security services with network and infrastructure  
• Identify, quantify and rectify cybersecurity risks associated with the business or infrastructure 

Lesson 2: Building Intelligence Driven, Defence-in-Depth Architecture  

• Implement Defense-in-Depth (DiD) on your infrastructure network  
• Secure an organisation with a threat driven approach  
• Map the various stages of a cyber attack with the cyber kill chain model  

Lesson 3: Threat Surface Analysis and Building Scalable Detection Service  

• Use the STRIDE methodology to complete threat modelling  
• Integrate security best practices into existing business and application process flow 
• Plan and build scalable services that can detect certain types of threats for the business or application  
• Integrate an alert pipeline for security teams to monitor for security incidents  

Lesson 4: Threat Triage and Detection Enrichment  

• Describe detection and response processes and frameworks  
• Implement the MITRE ATT&CK framework to map our threat landscape against different attack scenarios  
• Design playbooks to triage and remediate security incidents quickly and efficiently  

Lesson 1: Incident Response and Business Continuity Architecture Planning Design and Implementation  

• Plan incident response roles, conduct asset inventories, and configure logging and monitoring  
• Plan and implement artefact collection, containment and isolation, and automated response procedures in runbooks  
• Plan, implement, and validate business continuity actions in runbooks  

Lesson 2: Incident Response Runbooks for Cloud Infrastructure  

• Identify and document incident response roles and responsibilities  
• Document an asset inventory for incident response  
• Configure logging and monitoring for cloud incident response  

Lesson 3: Incident Response Playbooks and Automation  

• Collect artefacts for incident response in a cloud environment  
• Contain and isolate infected resources for incident response in a cloud environment  
• Automate incidence response scripts in a cloud environment  

Lesson 4: Business Continuity  

• Perform business continuity analysis 
• Automate business continuity actions  
• Validate and document business continuity