SC-5002 Secure Azure Services and Workloads with Microsoft Defender for Cloud Regulatory Compliance Controls

Topic 1 Examine Defender for Cloud regulatory compliance standards

• Regulatory compliance standards in Defender for Cloud
• Microsoft cloud security benchmark in Defender for Cloud
• Improve your regulatory compliance in Defender for Cloud

Topic 2 Enable Defender for Cloud on your Azure subscription

• Connect your Azure subscriptions
• Exercise - Configuring Microsoft Defender for Cloud for Enhanced Protection

Topic 3 Filter network traffic with a network security group using the Azure portal

• Azure resource group
• Azure Virtual Network
• How network security groups filter network traffic
• Application security groups
• Create a virtual network infrastructure

Topic 4 Create a Log Analytics workspace

• Log Analytics workspace
• Create a Log Analytics workspace

Topic 5 Collect guest operating system monitoring data from Azure and hybrid virtual machines using Azure Monitor Agent

• Deploy the Azure Monitor Agent
• Collect data with Azure Monitor Agent
• Create a data collection rule and install the Azure Monitor Agent

Topic 6 Explore just-in-time virtual machine access

• Understand just-in-time virtual machine access
• Enable just-in-time access on virtual machines
• Enable just-in-time access on virtual machines

Topic 7 Configure Azure Key Vault networking settings

• Azure Key Vault basic concepts
• Best practices for Azure Key Vault
• Azure Key Vault network security
• Configure Azure Key Vault firewalls and virtual networks
• Configure Key Vault networking settings
• Azure Key Vault soft delete overview
• Virtual network service endpoints for Azure Key Vault
• Enable soft delete in Azure Key Vault

Prerequisite

This is a intermediate course. The following knowledge is assumed

• Basic programming
• Basic electronics
• Basic Raspberry Pi

Software Requirement

Please install the following software prior to the class

• RealVNC Viewer

HRDF Funding

Please refer to this video https://youtu.be/Kzpd-V1F9Xs

1-     HRD Corp Grant Helper

How to submit grant applications for HRD Corp Claimable Courses

2-     Employers are required to apply for the grant at least one week before training commences.

Employers must submit their applications with supporting documents, including invoices/quotations, trainer profiles, training schedule and course content.

3-     First, Login to Employer’s e-TRIS account -https://etris.hrdcorp.gov.my

Second, Click Application

4-     Click Grant on the left side under Applications

5-     Click Apply Grant on the left side under Applications

6-     Click Apply

7-     Choose a Scheme Code and select HRD Corp Claimable Courses: Skim Bantuan Latihan Khas. Then, click Apply

8-     Scheme Code represents all types of training that suit the requirements provided by HRD Corp. Below are the list of schemes offered by HRD Corp:

9-     Select your Immediate Officer and click Next

10-  Select a Training Provider, then click Next

11-  Please select a training programme from the list, then key in all the required details and click Next

Select your desired training programme.

Give an explanation on why the participant is required to attend the training. E.g., related to their tasks/ career development, etc.

Explain the background and objective of this training.

Select a relevant focus area. For Employer-Specific Courses, select ‘Not Applicable’.

12-  If the training programme is a micro-credential programme, you are required to complete these 3 fields. Save and click Next

Insert MiCAS Application number

13-  Based on the nine (9) pillars listed below, HRD Corp Focus Area Courses are closely tied to support government initiatives towards nation building. As such, courses offered through the HRD Corp Focus Areas are designed to provide the workforce with skills required for current and future demands. Details of the focus areas are as follows:

14-  Please select a Course Title and Type of Training

15-  Select the correct type of training according to the actual type of training, or as mentioned in the training brochure:

16-  Please key in the Training Location and click Next

17-  Please select the Level of Certification and click Next

18-  Please follow the instructions and key in trainee details

19-  Click Add Batch, then click Save

20-  Click Add Trainee Details

21-  Please key in all the required details, then click Add

22-  Click Add if there are more participants. Once done, click Save

23-  Click Next

24-  Please key in the course fees and allowance details, then click Save

25-  Estimated cost includes the course fees/external trainer fees, allowances, and consumable training materials. Please comply with the HRD Corp Allowable Cost Matrix.

26-  Select Upfront Payment to Training Provider and key in the percentage from 0% to 30%. Then, click Save and Next

27-  Complete the declaration form and select a desired officer

28-  Add all the required documents, then click Add Attachment. Then, click Save and Submit Application

29-  Once the New Grant Application is successfully submitted, the Grant Officer will evaluate the application accordingly. The application may be queried if additional information is required.

The application status will be updated via the employer’s dashboard, email, and the e-TRiS inbox.

• Cloud Security Engineer
• Azure Security Engineer
• Cybersecurity Analyst
• Cloud Compliance Specialist
• Security Operations Center (SOC) Analyst
• Information Security Officer
• IT Security Administrator
• Microsoft Defender for Cloud Specialist
• Security Architect
• Compliance and Risk Manager
• IT Governance Specialist
• Cloud Infrastructure Engineer
• Security Threat Analyst
• Enterprise Security Engineer
• Azure Solutions Architect
• Network Security Engineer
• Identity and Access Management (IAM) Specialist
• Virtualization Security Expert
• Incident Response Specialist
• Security Automation Engineer

Reza Khosravi: Reza Khosravi  is the founder and CEO of Skymics Sdn Bhd a High Tech MSC status company in field of IT and Internet of Things Technology. He has over 15 years of experience in IT and Telecomunication. He is the inventor of the C65 embedded device. He graduated from Staffordshire University with MBA degree in IT.

• More than 5 years of experiance in Smart Cities Solutions
• Expert on Embedded System Design, Raspberry Pi and Arduino
• Expert on IBM Blunix and IBM Watson
• More than 3 years of experiance in filed of IoT solutions.
• He is the designer of below IoT Projects in last 3 years.

1. Smart Building System
2. Energy Monitoring, Controlling and Saving
3. Environmental Monitoring
4. Flood detection and prediction system based on IoT and big data
5. Online Weather Station Based on IoT
6. Smart Farming System (Long Range Wireless Sensor Networks)
7. Smart Hydroponic System Based on IoT
8. IP TV and Digital Signage System
9. RFID Payment Gateway Solutions
10. GPS Tracking System
11. Remote Sensing

Sam Ng: Sam Ng was the founder of the Penang and PJ Raspberry Pi meetups. He has more than 15 years experience in IT including Linux solutions & experience and is currently a Freelance DevOps/Cloud Engineer. He has a variety of working experience including starting an IT department in a Contract Manufacturing company in Penang. Other work experience including System Engineering in Wireless networking & Cloud networking projects as well as experience with Digital Signage projects. He has also conducted Arduino IOT Training for Adults and Secondary School children as well as Raspberry Pi Training. Areas of interest are Raspberry Pi and IoT security. He is currently working on his AWS certification.

Saeid: Saeid  is co-founder of Skymics sdn bhd, he has 8 years experience in field of IOT (Internet of things) and Information Technology. He is a certified IBM IoT Practitioner and instructor and Certified Citizen Data Scientist Train-The-Trainer. He has been co-inventors of 3 inventions during the last 4 years.

He has worked across wide domains such as, data analytics, IoT, social media analytics, smart cities energy management, smart plantations. In addition, 5+ years of experience in data processing, visualization, and analytics. He is expert in Power BI, Qlikview, and Tableau.

Muhammad Syamsi: Muhammad Syamsi graduated from International Islamic University Malaysia, Kuala Lumpur with BSc in Electronic-Computer Information Engineering before pursuing Master in Telecommunication Engineering at UITM, Shah Alam. He is now the Software Engineer at Willowglen Malaysia Sdn Bhd. His experience includes integrating Raspberry Pi with SCADA system via modbus protocol and compiling MQTT protocol for use of SCADA RTU. Besides, he also one of front end web developer in his company. He has also acquired good background experience in teaching electronic and electrical since he was a lecture at Kolej WIT Klang

Nero: Nero is dean of Penang School of AI, which is AI learning and sharing community in Northern Malaysia. He is Msc in Computer Imaging in Universiti Sains Malaysia. His research is mainly focusing in Video Analytic and Multiple object tracking. At the same time, he is developing computer vision application in WyseTime, a tech-startup company focus on video analytic application using deep learning technology.