Cloud Security Awareness Training

A one-day awareness programme for people using cloud applications rather than administering cloud infrastructure. Participants review fictional sharing, access and app-connection requests, and practise identifying what they can decide and what needs an authorised system owner.

Who should attend: Employees, team leaders, operations, procurement and business users of cloud applications. No prior cybersecurity qualification is required.

HRD Corp Training Provider Malaysia HRD Corp claim support available

Programme Focus

This is end-user awareness. The existing Cloud Security Fundamentals course covers technical cloud roles, and ISO/IEC 27017 Fundamentals introduces the control framework.

Programme Agenda

01

9:00 AM to 10:00 AM

What Changes When Work Moves to the Cloud

Describe the service provider, organisation and user responsibilities in a simple business application. Identify the approved owner and distinguish a service being available from a particular sharing decision being appropriate.

02

10:00 AM to 10:15 AM

Break

03

10:15 AM to 11:30 AM

Protecting Cloud Accounts

Review approved sign-in routes, authentication methods and recovery contacts. Identify unexpected prompts and requests for access that should be reported before approval.

04

11:30 AM to 12:30 PM

Files, Links and External Collaboration

Check the intended recipient, permission and access period for a shared document. Work through public links, forwarded invitations and files copied to personal accounts.

05

12:30 PM to 1:30 PM

Lunch

06

1:30 PM to 2:45 PM

Apps and Connected Services

Review a fictional application requesting access to organisational files. Ask what it needs, who approved it and how access can be removed. Route technical configuration questions to the service owner.

07

2:45 PM to 3:00 PM

Break

08

3:00 PM to 4:00 PM

Data Handling and Incident Escalation

Identify where a sensitive record may be stored or shared under company policy. Practise reporting accidental exposure, lost access and an unfamiliar account activity notice with useful context.

09

4:00 PM to 5:00 PM

Practical Exercise: A Shared Project Workspace

Set out the access and handling rules for a fictional project involving staff and an external supplier. Review a risky link and an app connection, then draft an action and escalation record.

Key Outcomes

  • Explain basic cloud responsibility boundaries
  • Review account and sharing requests
  • Recognise unapproved app connections
  • Escalate cloud-data handling concerns

Training Mode   Physical / Online / Hybrid

HRD Corp   Subject to programme eligibility and HRD Corp approval

Level   Fundamentals / Beginner. No prior cybersecurity experience required.

Duration   1 Day | 9:00 AM to 5:00 PM (6.5 learning hours, excluding breaks)

Venue   In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)

Assessment   Group case exercise and a 10-question knowledge check

Certificate   Orbix Certificate of Completion upon full attendance; not a professional certification

Enquiries   Contact us to register or discuss scheduling

Malaysia Relevance

Relevant to Malaysian organisations storing staff, customer or confidential information in cloud services. Exercises connect approved storage locations, external sharing and supplier questions with internal privacy and security procedures.

Practical Takeaways

A cloud-user decision checklist and shared-workspace access worksheet.

Download a sample practice worksheet (TXT). This fictional exercise is a preview of the learning approach. About Orbix; contact us to confirm the facilitator and relevant experience for your delivery.

Course Completion and Next Steps

Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.

Frequently Asked Questions

One day, from 9:00 AM to 5:00 PM, with 6.5 learning hours excluding lunch and two breaks.

Employees, team leaders, operations, procurement and business users of cloud applications. No prior cybersecurity qualification is required.

Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.

A cloud-user decision checklist and shared-workspace access worksheet.

Yes. Physical, online and hybrid delivery can be arranged for an in-house group. Contact Orbix to discuss dates, fees and delivery requirements.

Contact Orbix for programme details and claim support. Funding is subject to programme eligibility, employer eligibility and HRD Corp approval; confirm the applicable requirements before booking.

Related Fundamentals Training

Cloud Security Fundamentals. ISO/IEC 27017 Fundamentals. View all fundamentals programmes

Reference material: Microsoft: security features and settings. NSA and CISA: secure cloud identity and access.