01
Explain authentication, authorisation, MFA, conditional access and privileged identity
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
FinOps Academy · Enterprise Assessment Center
Cloud Security and Zero Trust Assessment
Assess identity, network, workload, data, secrets, posture management, security operations and compliance controls.
Objective: Demonstrate risk-based cloud security engineering supported by verifiable technical evidence.
Practical guidance
Assessment scope and competencies
02
Describe network segmentation, private access, workload protection and posture management
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Connect secrets, certificates, encryption, logging and incident response
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Scenario and practical challenges
01
Respond to credential compromise in a hybrid estate
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Threat-model a sensitive cloud workload
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Review a deployment path for supply-chain and secrets risks
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Scoring and evidence standards
01
Score control effectiveness, evidence quality and residual-risk awareness
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Require prioritisation by likelihood, impact and exposure
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Evaluate usability and operational sustainability of controls
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
Practical guidance
Improvement and readiness plan
01
Recommend threat-modelling and investigation exercises
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
02
Create a control-evidence matrix
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.
03
Reassess through a compromise-response scenario
Apply this point to a real FinOps Academy design, delivery or operational scenario and record the evidence used to validate the outcome.