Implementing SaaS Security Guidelines (SS113)

The Cybersecurity and Infrastructure Security Agency (CISA) is offering the cybersecurity awareness webinar, Implementing SaaS Security Guidelines (SS113). We are excited to share this information with stakeholders across the Federal enterprise and nationally. This session is designed for a non-technical audience and beginning incident responders.

The training team worked closely with the Secure Cloud Business Applications (SCuBA) project during the development of this course material. SCuBA provides guidance and capabilities to secure agencies’ cloud business application environments and protect Federal Civilian Executive Branch (FCEB) information assets that are created, accessed, shared, and stored in those environments through consistent, effective, modern, and manageable security configurations.

Participants can earn 1 Continuing Professional Education (CPE) credit for attending this course.

This webinar includes the following information and more:

• Identify and Mitigate Vulnerabilities: Provide knowledge and skills to identify and address cybersecurity challenges in federal cloud business applications, emphasizing a Zero-Trust approach and the integration of various cloud security services.
• Importance of SCuBA Technical Reference Architecture (TRA) and extensible Visibility Reference Framework (eVRF): Define the background and purpose of the SCuBA project and associated guidelines to secure cloud-based business applications.
• MITRE ATT&CK® Framework: Explain how the MITRE ATT&CK® framework is used to characterize threat sources and Tactics, Techniques, and Procedures specific to cloud platforms.
• Key Guidance for Organizations: Identify specific cloud security guidance and strategies for the implementation of security controls on a SaaS.
• Knowledge Check: The course includes a brief knowledge check section to reinforce key concepts and takeaways.

You will receive a confirmation email with the Webex meeting room link, registration ID and calendar invitation after your registration is approved. This event and its audio are available through Webex. Closed captioning (English only) will be available. If you require a reasonable accommodation to fully participate in this virtual event, contact cyberinsights@cisa.dhs.gov at least five business days prior to the training with the type of support needed.