About this course
Most employees interact with cloud services every day, whether it's storing files in a shared drive, using a cloud-based CRM, or collaborating through a project management platform, but few understand where their organization's security responsibilities actually begin. This course introduces cloud security fundamentals in plain, non-technical language for business users, along with a slightly deeper layer of guidance for IT teams supporting them.
The central concept is the shared responsibility model used by AWS, Azure, and GCP: the cloud provider secures the physical infrastructure and platform, while the customer, including every employee who configures a folder's sharing settings or invites a collaborator, is responsible for how their data is accessed, shared, and protected. This means everyday choices, like who a file is shared with, whether a link is public or restricted, and which apps are connected to a company cloud account, are squarely within the user's control and their risk.
This matters because cloud misconfiguration and oversharing are common, avoidable sources of exposure that don't require an attacker to breach any provider's infrastructure. A folder shared with "anyone with the link," an old integration that still has account access, or a document left in a personal cloud drive can all create risk without any system being "hacked" in the traditional sense.
This course is designed for all business users and the IT teams who support them. After completing it, learners will be able to explain the shared responsibility model in simple terms, apply safe sharing and permission settings in everyday cloud tools, recognize the risks of shadow IT (unapproved cloud apps), and know when to involve IT or security before connecting a new cloud service to company data.
Want this tailored to your organization's policies? Build your own with AI or book a demo.