Governance, Risk & Compliance (GRC) Stack Course  24 February 2012

Outsourcing critical business functions into the cloud can present challenges in creating and sustaining assurance and control over legal and regulatory obligations for data management and protection.  The real challenge, however, is the creation of trust in the cloud through transparency and evidence-based confidence that everything that is claimed to be happening is, indeed, happening … and nothing else.  The end result of such trust generation is the creation and capture of real payoffs for the consuming enterprise, and greater market utility for the provider enterprise!  The CSA GRC stack and practice is designed to generate and make evident those layers of trust and transparency between Cloud Service Providers and their customers.  In this one day course, you will learn how to leverage the Cloud Security Alliance (CSA) GRC Stack, giving you a snap shot into emerging cloud standards development efforts, and the CSA Security, Trust & Assurance Registry (STAR) to help you meet your organization's due diligence requirements associated with trustworthy cloud supply chain adoption.  This course will be broken into two (2) half day sessions, first an overview session followed by a hands-on learning exercise to apply knowledge and use of the CSA GRC Stack and STAR that was introduced in the first part of the class.

This course can be taken as a stand-alone course or as a follow on to the CSA Cloud Computing Security Knowledge (CCSK) Basic or Plus classes.  Discounts are available for students that register for the CCSK Plus Class being taught in conjunction with the GRC Stack course, use discount code GRCSTACK to receive a $100 discount off the Plus class price (Only one discount code per registrant).*

 Instructor: Becky Swain

Becky Swain is a Founding Member of the Cloud Security Alliance (CSA).  Mrs. Swain has over 13 years of strategic and applied information security expertise with both a broad and deep understanding of the design and effectiveness of policies, processes, architectures, and internal controls.  As Co-Founder/Chair of the CSA Cloud Controls Matrix (CCM), Mrs. Swain is actively engaged in evangelizing and developing the adoption of emerging Cloud security standards and risk management best practices.  She is a Project Co-editor for the new international standard on supplier information security risk management, ISO/IEC 27036.  Mrs. Swain holds numerous certifications, including CISSP, CISA, CIPP/US and CIPP/IT and serves on the Board of the CSA Silicon Valley Chapter.  Mrs. Swain was also an award finalist for the ‘Information Security Practitioner’ category in the inaugural (ISC)2 2011 Americas Information Security Leadership Awards (Americas ISLA).

Substitutions and Cancellations

Substitutions:

You may substitute another person in your place at any time PRIOR to the start of the course by contacting the host. Only the person identified in your e-mail may be substituted for the original person registered, and once substitution is made, the original registrant can only attend the course by paying full tuition fee. 

Refunds:

If you have no one to replace you, please submit your refund request in writing to the host. Cancellations made outside of 10 business days of the first day class will be given a full refund. Cancellations made within 10 business days of the first day of class will be given a voucher to attend a future class offered by Bright Moon Security.