Cybersecurity · Advanced level

Advanced level · Module 4 of 6 · 24 guided hours

Identity, Email and Cloud Security

Secure the identities, email and cloud services most organisations now depend on.

Learning objectives

  • Roll out strong authentication across an organisation
  • Manage privileged and third-party access
  • Protect email with SPF, DKIM and DMARC
  • Secure cloud storage and collaboration

Topics

  • MFA rollout
  • phishing-resistant authentication
  • privileged access
  • SPF, DKIM and DMARC
  • cloud sharing and data loss
  • third-party access

Lessons

  1. Lesson 1 Organisation-Wide MFA

    Roll out MFA to everyone without stopping work.

    MFA rolloutauthenticator appsphishing-resistant methodsexceptions

  2. Lesson 2 Privileged and Third-Party Access

    Control the accounts that can do the most damage.

    separate admin accountsbreak-glass accountsaccess reviewscontractor access

  3. Lesson 3 Email Authentication: SPF, DKIM and DMARC

    Stop others from sending email that pretends to come from your domain.

    SPFDKIMDMARC policyreports

  4. Lesson 4 Securing Cloud Storage and Collaboration

    Protect data in shared drives, email and collaboration tools.

    sharing defaultsexternal sharingsensitivity labelsdevice access

Practical activity

Produce an identity and email hardening plan for the case NGO, including an MFA rollout plan, admin account design and a DMARC deployment plan.

Expected outcomes

  • Strong identity controls
  • Protected email domain and cloud data

Assessment

Hardening plan reviewed for completeness, sequencing and practicality.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.