The NCSC Cloud Security Principles in Practice course provides a structured introduction to applying cloud security principles, assurance practices and governance considerations within modern cloud environments. It explores how organisations can assess cloud risks, protect data and services, manage identities and interfaces, and maintain effective security assurance.The course begins with modern cloud security and NCSC assurance, covering cloud service models, hybrid environments, shared responsibility, risk context, proportionality, data classification, threat modelling, business impact and provider assurance decisions.Learners then explore the protection of cloud data and core services, including secure connectivity, encryption, backup and recovery, customer separation, multi-tenant security, governance, risk ownership and resilience assurance.Further modules address secure operations, personnel security, privileged access, secure-by-design practices, DevSecOps, Infrastructure as Code and third-party supply-chain risks. The course also examines identity and access management, MFA, passkeys, conditional access, Zero Trust, API protection, secure administration, logging, alerting and secure configuration.The final module focuses on the UK cloud governance and regulatory environment, including UK GDPR, the Data Protection Act 2018, international transfers, NIS Regulations, sector duties, cloud procurement, supplier assurance, board accountability, security audits, metrics and compliance evidence.
