Strategies for Cloud Security Risk Management

Grow your skills with Coursera Plus for $239/year (usually $399). Save now.

Strategies for Cloud Security Risk Management

This course is part of Google Cloud Cybersecurity Professional Certificate

Instructor: Google Cloud Training

7,853 already enrolled

Included with

Learn more

4 modules

Gain insight into a topic and learn the fundamentals.

76 reviews

Beginner level

No prior experience required

Flexible schedule

2 weeks at 10 hours a week

Learn at your own pace

96%

Most learners liked this course

4 modules

Gain insight into a topic and learn the fundamentals.

76 reviews

Beginner level

No prior experience required

Flexible schedule

2 weeks at 10 hours a week

Learn at your own pace

96%

Most learners liked this course

What you'll learn

Analyze the key components and objects of the risk management process.
Explore cloud security risk frameworks.

Skills you'll gain

Details to know

Shareable certificate

Add to your LinkedIn profile

Assessments

23 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

logos of Petrobras, TATA, Danone, Capgemini, P&G and L'Oreal

Build your Cloud Computing expertise

This course is part of the Google Cloud Cybersecurity Professional Certificate

When you enroll in this course, you'll also be enrolled in this Professional Certificate.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate from Google Cloud

There are 4 modules in this course

Ready for more?! This is the second course of the Google Cloud Cybersecurity Certificate. Crack the code of security and compliance! ️ This course is your decoder ring to unlock the world of security domains, frameworks, and data privacy. Discover the secret language of risk, controls, and the trio of compliance: people, process, and tech!

In this module, you’ll dive into the essential concepts of security domains, compliance frameworks, data privacy fundamentals, risk and security controls. You'll discover the key differences between security and compliance, and learn about controls and frameworks within the three pivotal areas of compliance: people, process, and technology. Explore risk and security controls in depth, giving you a clear view of how these controls are effectively implemented.

What's included

13 videos10 readings5 assignments

13 videos Total 34 minutes

Introduction to Course 2 3 minutes
Preston: Continuous growth in cloud security 1 minute
Welcome to module 1 1 minute
Introduction to cloud security domains 5 minutes
Explore compliance and security 4 minutes
Phil: A day in the life of a Chief Information Security Officer 3 minutes
Security controls and compliance 2 minutes
Risk and compliance 4 minutes
The three areas of compliance: People, process, and technology 3 minutes
Overview of the Google Cloud Security Command Center 2 minutes
Cloud security controls 3 minutes
Explore steps to implement security controls 3 minutes
Wrap-up 1 minute

10 readings Total 100 minutes

Course 2 overview 10 minutes
Helpful resources and tips 10 minutes
Lab technical tips 10 minutes
Explore your course 2 scenario: Cymbal Bank 10 minutes
Learn more about security and compliance with Google whitepapers 10 minutes
Learn more about security controls 10 minutes
Use existing frameworks to demonstrate compliance 10 minutes
Control mapping for risk management 10 minutes
Security control implementation 10 minutes
Glossary terms from module 1 10 minutes

5 assignments Total 82 minutes

Module 1 challenge 50 minutes
Test your knowledge: Security domains and compliance 8 minutes
Test your knowledge: Risk, security controls, and compliance 8 minutes
Test your knowledge: Compliance and risk management 8 minutes
Test your knowledge: Security control mapping and implementation 8 minutes

Get ready to level up your risk management game! In this module, you'll crack the code on popular frameworks like NIST CSF, SOC 2, FedRAMP, HIPAA, and ISO 27001. You'll compare and contrast these frameworks like superheroes in a face-off, so you can pick the perfect one for any situation. Plus, you'll learn how to use them to build your own fortress of security, keeping your data safe and sound. So, buckle up and get ready for an epic adventure in risk management proficiency.

What's included

9 videos7 readings5 assignments

9 videos Total 24 minutes

Welcome to module 2 1 minute
MK: Risk management in a cloud-first world 2 minutes
Introduction to risk management frameworks 3 minutes
Data protection and privacy 3 minutes
Data protection and privacy scenarios 4 minutes
Industry-specific regulations and standards 3 minutes
Apply industry-specific requirements 2 minutes
Risk management industry standards 4 minutes
Wrap-up 1 minute

7 readings Total 62 minutes

Risk management and security frameworks 10 minutes
Compare and contrast risk management frameworks 10 minutes
Google’s Secure AI Framework 10 minutes
Learn more about data protection and privacy regulations 10 minutes
Security frameworks, regulations, laws, and standards 10 minutes
What is Google Cloud Risk Manager? 10 minutes
Glossary terms from module 2 2 minutes

5 assignments Total 82 minutes

Module 2 challenge 50 minutes
Test your knowledge: Risk management frameworks 10 minutes
Test your knowledge: Data protection and privacy regulations 8 minutes
Test your knowledge: Differences between and applications of industry regulations 8 minutes
Test your knowledge: Industry standards 6 minutes

In this module, you'll unlock the secrets of the compliance lifecycle. Imagine it as a labyrinth of rules and regulations – you'll learn how to map your path through controls, dodge the pitfalls of non-compliance, and perform audits like a seasoned adventurer. Discover how Policy-as-Code (PaC) can weave powerful safeguards directly into your Infrastructure-as-Code (IaC), transforming it into a self-defending fortress.

What's included

12 videos9 readings7 assignments

12 videos Total 36 minutes

Welcome to module 3 1 minute
Bill: Use a security mindset 3 minutes
Overview of compliance lifecycle 3 minutes
Cloud security controls 4 minutes
Control mapping 3 minutes
Cloud security audits 3 minutes
Prepare for an audit 5 minutes
Cloud security control inheritance 4 minutes
Cloud resource hierarchy and security controls 2 minutes
Negative organizational impacts of non-compliance 3 minutes
Policy as code and infrastructure as code 3 minutes
Wrap-up 1 minute

9 readings Total 90 minutes

Learn more about controls for workloads and services 10 minutes
Activity: Review a compliance report 10 minutes
Activity Exemplar: Review a compliance report 10 minutes
Audits and security assessments 10 minutes
Best practices for Google Cloud resource hierarchy 10 minutes
Key considerations when writing policy as code 10 minutes
Activity: Review and update a risk management policy 10 minutes
Activity Exemplar: Review and update a risk management policy 10 minutes
Glossary terms from module 3 10 minutes

7 assignments Total 104 minutes

Module 3 challenge 50 minutes
Activity Quiz: Review a compliance report 10 minutes
Test your knowledge: Control mapping 10 minutes
Test your knowledge: Assessments and auditing 10 minutes
Test your knowledge: Control inheritance and resource hierarchy 10 minutes
Activity Quiz: Review and update a risk management policy 8 minutes
Test your knowledge: Compliance, policy as code, and infrastructure as code 6 minutes

Prepare for a thrilling expedition into the cloud! In this module, you'll skillfully wield the powers of Google's Security Command Center, Risk Manager, and Policy Analyzer – your trusty toolbox for conquering compliance challenges. Discover how these tools, combined with cloud security posture management (CSPM), form your ultimate defense system. You'll chart a course through the landscapes of CIS, NIST, ISO, and MITRE, learning to use their wisdom as your compass for risk management and security excellence.

What's included

12 videos10 readings6 assignments1 app item1 plugin

12 videos Total 40 minutes

Welcome to module 4 2 minutes
Vulnerability management frameworks 2 minutes
Introduction to multicloud CSPMs 4 minutes
Security Command Center 4 minutes
Security Command Center, Risk Manager, Policy Analyzer, Assured Workloads 4 minutes
Understand Google Cloud’s Risk Protection Program 3 minutes
The value of shared fate in cloud risk protection programs 4 minutes
Organizational policies in the cloud 4 minutes
Organization Policy Service 4 minutes
Wrap-up 1 minute
Patrick and Danielle: Interview role play 6 minutes
Course wrap-up 2 minutes

10 readings Total 120 minutes

Vulnerability management 10 minutes
Cloud security management (CSPM) resources 20 minutes
Cloud tools for risk management 20 minutes
Guide to risk assessment and compliance management with Security Command Center 10 minutes
Digital sovereignty and sovereign clouds 10 minutes
Organizational policy constraints, inheritance and violation 10 minutes
Interview tip: provide examples 10 minutes
Glossary terms from module 4 10 minutes
Course 2 resources and citations 10 minutes
Glossary terms from course 2 10 minutes

6 assignments Total 90 minutes

Module 4 challenge 50 minutes
Test your knowledge: Risk and compliance frameworks 8 minutes
Test your knowledge: CSPMs 8 minutes
Test your knowledge: Security Command Center 8 minutes
Test your knowledge: Risk protection programs 8 minutes
Test your knowledge: Organizational policies 8 minutes

1 app item Total 90 minutes

Use reports to remediate findings 90 minutes

1 plugin Total 15 minutes

Accessing and completing labs 15 minutes

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV. Share it on social media and in your performance review.

Instructor

Instructor ratings

(13 ratings)

Google Cloud Training

Google Cloud

2,113 Courses 4,016,582 learners

Offered by

Google Cloud

Explore more from Cloud Computing

Google Cloud
Cloud Security Risks: Identify and Protect Against Threats
Course
LearnKartS
Cloud Security Governance and Threat Modeling
Course
Google Cloud
Managing Security in Google Cloud
Course
LearnQuest
Strategic Edge Security Management
Course

Why people choose Coursera for their career

Felipe M.

Learner since 2018

"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."

Jennifer J.

Learner since 2020

"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."

Larry W.

Learner since 2021

"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."

Chaitanya A.

"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."

Learner reviews

5 stars
73.68%
4 stars
18.42%
3 stars
0%
2 stars
1.31%
1 star
6.57%

Showing 3 of 76

Reviewed on Mar 31, 2025

i loved this teacher, thank you google for always choosing amazing teachers!

Reviewed on Jan 26, 2026

Excellent material for a beginner. Recommend this course to anyone wanting to get their feet wet in cybersecurity.

Reviewed on Nov 17, 2024

this is very good they did well puting everything together

View more reviews

Open new doors with Coursera Plus

Unlimited access to 10,000+ world-class courses, hands-on projects, and job-ready certificate programs - all included in your subscription

Learn more

Advance your career with an online degree

Earn a degree from world-class universities - 100% online

Explore degrees

Join over 3,400 global companies that choose Coursera for Business

Upskill your employees to excel in the digital economy

Learn more

Frequently asked questions

To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.

When you enroll in the course, you get access to all of the courses in the Certificate, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.