Secure Banking Workloads on AWS / Azure / GCP
Secure Banking Workloads on AWS / Azure / GCP
Description
Transformasi digital di perbankan mendorong adopsi cloud computing untuk meningkatkan skalabilitas, efisiensi operasional, dan inovasi layanan. Platform cloud seperti AWS, Azure, dan GCP memungkinkan bank untuk menjalankan aplikasi kritikal, data analytics, dan core banking dengan fleksibilitas tinggi.
Namun, migrasi dan pengelolaan workload perbankan di cloud menghadirkan tantangan signifikan terkait keamanan, kepatuhan, dan risiko operasional. Modul ini membahas cara:
- Menjalankan secure banking workloads di public cloud
- Memenuhi regulasi perbankan dan standar keamanan (misal OJK, PCI DSS, ISO 27001)
- Memanfaatkan layanan cloud secara aman untuk core banking, data analytics, dan aplikasi fintech
Pendekatan yang benar memastikan keamanan data nasabah, integritas transaksi, dan continuity operasional bank.
Objectives
Setelah mengikuti modul ini, peserta diharapkan mampu:
- Memahami arsitektur cloud (AWS, Azure, GCP) untuk kebutuhan perbankan.
- Mengidentifikasi risiko keamanan yang terkait dengan workload perbankan di cloud.
- Menerapkan praktik keamanan berbasis identity, network, dan data protection.
- Menyusun strategi compliance untuk regulasi perbankan di cloud.
- Menggunakan layanan cloud untuk monitoring, audit, dan threat detection.
- Merancang dan mengelola cloud environment yang resilient dan secure
Course outline
A. Overview Cloud Platforms for Banking
- AWS, Azure, GCP: service offerings dan deployment models
- Public vs private vs hybrid cloud
- Use cases: core banking, digital banking apps, analytics, disaster recovery
B. Security Principles for Cloud Workloads
- Shared responsibility model
- Identity & access management (IAM)
- Encryption: data-at-rest & data-in-transit
- Network security: VPC, firewall, micro-segmentation
C. Compliance & Regulatory Requirements
- Regulatory frameworks: PCI DSS, ISO 27001, OJK, GDPR (jika applicable)
- Audit readiness dan reporting
- Governance & policy enforcement di cloud
D. Risk Management & Threat Detection
- Threat modeling dan vulnerability assessment
- Security monitoring & logging (CloudTrail, Azure Monitor, GCP Security Command Center)
- Incident response & disaster recovery planning
E. Secure Deployment & Operations
- Secure DevOps (DevSecOps) pipeline
- Configuration management & hardening cloud resources
- Patching & patch management automation
- Data backup & recovery strategies
F. Best Practices & Case Studies
- Secure migration strategy dari on-premise ke cloud
- Multi-cloud vs single-cloud security approach
- Real-life banking workload security implementation
G. Hands-on / Simulation
- Setting IAM policies, network security, and encryption
- Monitoring and alerting for security events
- Audit checklist for compliance readiness
Participants
- Cloud Computing
- Information Security
- Cybersecurity
- IT / System Development
- DevOps
- Risk Management
- Compliance
- Digital Banking
- Data Analytics
- IT Governance
- Operations
- Management
- Top Management / Executive
Method
- Pre-test
- Presentation
- Discussion
- Case study
- Post-test
Facilities
- Ruang Meeting Representatif
- Sertifikat Pelatihan Resmi
- Instruktur Profesional & Berpengalaman
- Training Kit Eksklusif
- Souvenir
- Pick Up Participant (Yogyakarta)
