Cloud Security Awareness Training
A one-day awareness programme for people using cloud applications rather than administering cloud infrastructure. Participants review fictional sharing, access and app-connection requests, and practise identifying what they can decide and what needs an authorised system owner.
Who should attend: Employees, team leaders, operations, procurement and business users of cloud applications. No prior cybersecurity qualification is required.
HRD Corp claim support available
Programme Focus
This is end-user awareness. The existing Cloud Security Fundamentals course covers technical cloud roles, and ISO/IEC 27017 Fundamentals introduces the control framework.
Programme Agenda
9:00 AM to 10:00 AM
What Changes When Work Moves to the Cloud
Describe the service provider, organisation and user responsibilities in a simple business application. Identify the approved owner and distinguish a service being available from a particular sharing decision being appropriate.
10:00 AM to 10:15 AM
Break
10:15 AM to 11:30 AM
Protecting Cloud Accounts
Review approved sign-in routes, authentication methods and recovery contacts. Identify unexpected prompts and requests for access that should be reported before approval.
11:30 AM to 12:30 PM
Files, Links and External Collaboration
Check the intended recipient, permission and access period for a shared document. Work through public links, forwarded invitations and files copied to personal accounts.
12:30 PM to 1:30 PM
Lunch
1:30 PM to 2:45 PM
Apps and Connected Services
Review a fictional application requesting access to organisational files. Ask what it needs, who approved it and how access can be removed. Route technical configuration questions to the service owner.
2:45 PM to 3:00 PM
Break
3:00 PM to 4:00 PM
Data Handling and Incident Escalation
Identify where a sensitive record may be stored or shared under company policy. Practise reporting accidental exposure, lost access and an unfamiliar account activity notice with useful context.
4:00 PM to 5:00 PM
Practical Exercise: A Shared Project Workspace
Set out the access and handling rules for a fictional project involving staff and an external supplier. Review a risky link and an app connection, then draft an action and escalation record.
Key Outcomes
- Explain basic cloud responsibility boundaries
- Review account and sharing requests
- Recognise unapproved app connections
- Escalate cloud-data handling concerns
Training Mode Physical / Online / Hybrid
HRD Corp Subject to programme eligibility and HRD Corp approval
Level Fundamentals / Beginner. No prior cybersecurity experience required.
Duration 1 Day | 9:00 AM to 5:00 PM (6.5 learning hours, excluding breaks)
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment Group case exercise and a 10-question knowledge check
Certificate Orbix Certificate of Completion upon full attendance; not a professional certification
Malaysia Relevance
Relevant to Malaysian organisations storing staff, customer or confidential information in cloud services. Exercises connect approved storage locations, external sharing and supplier questions with internal privacy and security procedures.
Practical Takeaways
A cloud-user decision checklist and shared-workspace access worksheet.
Download a sample practice worksheet (TXT). This fictional exercise is a preview of the learning approach. About Orbix; contact us to confirm the facilitator and relevant experience for your delivery.
Course Completion and Next Steps
Participants receive an Orbix Certificate of Completion upon full attendance. This introductory programme does not confer a professional qualification, certify an organisation, or replace organisation-specific technical, legal or regulatory assessment.
Frequently Asked Questions
Related Fundamentals Training
Cloud Security Fundamentals. ISO/IEC 27017 Fundamentals. View all fundamentals programmes
Reference material: Microsoft: security features and settings. NSA and CISA: secure cloud identity and access.