– Overview of GCP Security Model
– Shared Responsibility Model in GCP
– Security Architecture in GCP
– Cloud Security Best Practices
– GCP Security Tools Overview
– Google Cloud Security Command Center
– Cloud Identity
– Cloud Key Management System (KMS)
– Security Health Analytics

– Introduction to IAM in GCP
– What is IAM?
– IAM roles and permissions
– Managing IAM Policies and Roles
– Predefined vs. Custom roles
– IAM Policies and Conditional Access
– Service Accounts and Key Management
– Creating and managing service accounts
– Key management strategies
– Security best practices for keys
– Identity Federation in GCP
– Single Sign-On (SSO) integration
– External Identity Providers (e.g., SAML, OAuth)
– Auditing IAM Policies and Permissions
– Logging IAM activity using Cloud Audit Logs
– Reviewing access and permissions
Lab:
– Setting up IAM roles, policies, and service accounts
– Creating a custom IAM role and applying best practices for least privilege

– Security Fundamentals of GCP Storage
– Cloud Storage security features
– Encryption in transit and at rest
– Managing Cloud Storage Access
– Securing Databases in GCP
– Google Cloud SQL: Security controls
– Google Cloud Spanner: Securing distributed databases
– Google Cloud Bigtable and Firestore security
– Backup and Disaster Recovery for GCP Storage
– Configuring automated backups
– Security for backup data
– Encryption of backups
– Managing Database Access and Encryption
– IAM integration with database services
– Database encryption strategies (e.g., SSL, TDE)
Lab:
– Configuring secure access to Cloud Storage
– Implementing encryption strategies for Cloud SQL

– Overview of Cloud Networking Security
– The role of Virtual Private Cloud (VPC)
– Private vs. Public IP addressing
– Network Security in VPC
– VPC Peering, Shared VPC, and VPN setup
– Securing network traffic using firewalls
– Internal DNS and private IPs
– GCP Firewalls and Security Policies
– Creating and managing firewall rules
– Security best practices for firewalls
– Controlling ingress and egress traffic
– Network Security with Cloud Armor
– Configuring Google Cloud Armor for DDoS protection
– Using Cloud Armor for WAF (Web Application Firewall)
– Security policies for Cloud Load Balancers
– Private Google Access and BeyondCorp Architecture
– Zero Trust architecture
– Using BeyondCorp for secure access
Lab:
– Configuring firewall rules for different network scenarios
– Implementing Google Cloud Armor for application security

– Overview of DDoS Attacks
– Types of DDoS attacks: Volume-based, Protocol-based, Application-based
– DDoS threat landscape
– Google Cloud’s DDoS Protection Strategy
– Google Cloud Armor for DDoS protection
– Google’s global infrastructure and DDoS mitigation
– Best practices for defending against DDoS attacks
– Threat Detection and Response in GCP
– Using Security Command Center for threat detection
– Google Cloud Threat Intelligence
– Real-time monitoring with Cloud Logging and Cloud Monitoring
– Incident Response in GCP
– Building an incident response plan
– Automating response with Google Cloud Security products
– Integrating with third-party security tools
Lab:
– Configuring Cloud Armor for DDoS protection
– Setting up Cloud Security Command Center for threat detection

– GCP Compliance and Regulatory Standards
– Overview of compliance standards (ISO 27001, GDPR, HIPAA, SOC 2, PCI-DSS)
– How GCP addresses compliance
– Managing data sovereignty and regional compliance
– Auditing GCP Resources and Services
– Setting up and using Cloud Audit Logs
– Auditing IAM permissions and activities
– Leveraging Cloud Security Command Center for audits
– Risk Management and Mitigation in GCP
– Identifying risks in cloud resources
– Implementing mitigation strategies
– Conducting vulnerability assessments
– Best Security Practices for GCP
– Security health checks and monitoring
– Continuous compliance monitoring with Forseti Security
– Automating security configurations with Terraform
Lab:
– Performing a security audit of a GCP environment
– Configuring continuous compliance monitoring

– Implement a secure GCP environment by applying IAM policies, securing storage, configuring network security, and enabling DDoS protection.
– Conduct a simulated security audit and ensure compliance with industry standards (e.g., GDPR, HIPAA).
– Present a comprehensive incident response plan for a hypothetical security breach in the cloud environment.

– Mid-course Quiz
– Final Exam
– Practical Labs and Project Evaluation