Domain 1—Cloud Concepts, Architecture, and Design 雲端概念、架構與設計

1.1 Understand cloud computing concepts 理解雲端運算概念

1.2 Describe cloud reference architecture 描述雲端參考架構

1.3 Understand security concepts relevant to cloud computing 了解與雲端運算相關的安全性概念

1.4 Understand design principles of secure cloud computing 理解安全雲端運算的設計原則

1.5 Evaluate cloud service providers 評估雲端服務提供商

Domain 2—Cloud Data Security 雲端資料安全

2.1 Describe cloud data concepts 描述雲端資料概念

2.2 Design and implement cloud data storage architectures 設計並實施雲端資料儲存架構

2.3 Design and apply data security technologies and strategies 設計並應用資料安全技術和策略

2.4 Implement data discovery 實施資料發現

2.5 Plan and implement data classification 計畫並實施資料分類

2.6 Design and implement information rights management (IRM) 設計並實施資訊權利管理 (IRM)

2.7 Plan and implement data retention, deletion, and archiving policies 計畫並實施資料保留、刪除和封存政策

2.8 Design and implement auditability, traceability, and accountability of data 設計並實施資料的可稽核性、可追蹤性和負責任性

Domain 3—Cloud Platform and Infrastructure Security 雲端平台與基礎設施安全

3.1 Comprehend cloud infrastructure and platform components 了解雲端基礎設施和平台元件

3.2 Design a secure data center 設計一個安全的資料中心

3.3 Analyze risks associated with cloud infrastructure and platforms 分析與雲端基礎設施和平台相關的風險

3.4 Planning and implementation of security controls 計畫並實施安全控制

3.5 Business continuity (BC) and disaster recovery (DR) 企業持續性與災害復原的規劃與實施

Domain 4—Cloud Application Security 雲端應用程式安全

4.1 Advocate training and awareness for application security 倡導應用程式安全的培訓和意識

4.2 Describe the secure software development life cycle 描述安全軟體開發生命週期

4.3 Apply the secure software development life cycle 運用安全軟體開發生命週期

4.4 Apply cloud software assurance and validation 運用雲端軟體保證和驗證

4.5 Use verified secure software 使用已驗證的安全軟體

4.6 Comprehend the specifics of cloud application architecture 了解雲端應用程式架構的特點

4.7 Design appropriate identity and access management solutions 設計適當的身份和存取管理解決方案

Domain 5—Cloud Security Operations 雲端安全作業

5.1 Build and implement physical and logical infrastructure for cloud environment 建置並實施雲端環境的實體和邏輯基礎設施

5.2 Operate and maintain physical and logical infrastructure for cloud environment 運作和維護雲端環境的實體和邏輯基礎設施

5.3 Implement operational controls and standards 實施作業控制措施和標準

5.4 Support digital forensics 支援數位鑑識

5.5 Manage communication with relevant parties 管理與相關方的溝通

5.6 Manage security operations 管理安全作業

Domain 6—Legal, Risk, and Compliance 法律、風險和遵循性

6.1 Articulate legal requirements and unique risks in cloud environment 闡述雲端環境中的法律要求和特殊風險

6.2 Understand privacy issues 了解隱私議題

6.3 Understand audit process, methodologies, and required adaptations 了解稽核過程、方法論和所需的調整

6.4 Understand implications of cloud to enterprise risk management 了解雲端對企業風險管理的影響

6.5 Understand outsourcing and cloud contract design 了解外包和雲端合約設計