Covers cloud platform auditing across AWS, Azure, and GCP — shared responsibility, identity and access management, encryption and data storage controls, and continuous compliance monitoring in distributed environments.

Modules

Cloud Computing Fundamentals for Auditors

Lessons

• Why Cloud Auditing Is Its Own Discipline Preview
• Major Cloud Providers at a Glance
• Multi-Cloud and Hybrid Environments

Shared Responsibility and Cloud Risk

Lessons

• Understanding the Shared Responsibility Model
• Misconfiguration as the Leading Cloud Risk
• Vendor Risk and Cloud Provider Due Diligence

Identity and Access Management in the Cloud

Lessons

• Cloud IAM Fundamentals
• Privileged Access and Root/Admin Accounts
• Access Reviews in Fast-Changing Cloud Environments

Data Storage and Encryption Controls

Lessons

• Auditing Cloud Storage Configuration
• Encryption at Rest and in Transit
• Data Retention and Deletion Controls

Auditing AWS Azure and GCP Environments

Lessons

• Native Security and Audit Tooling
• Infrastructure as Code and Configuration Auditing
• Container and Serverless Environment Considerations

Continuous Monitoring and Cloud Compliance

Lessons

• Continuous Compliance Monitoring
• Compliance Frameworks in the Cloud (SOC 2, FedRAMP, PCI)
• Reporting Cloud Risk and Building an Audit Cadence