Technology & security
Cloud Security Foundations
Build an evidence-led Cloud Security Foundations foundation you can explain in a real workplace or interview.
Protect cloud-based systems through identity, controls and monitoring.
About this course
Learn shared responsibility, access, data protection, logging, incident readiness and cloud-risk decisions.
Career relevance
Where this can take you
Designed for learners exploring technology careers and building a practical, honest portfolio.
Portfolio project: Create a Cloud Security Foundations capstone pack that documents your purpose, method, evidence, quality check and next action.
Skills you will gain
Practical skills, not just theory
What you will learn
Understand the core workflow behind cloud security foundations.
Create practical evidence using controlled, workplace-ready methods.
Make evidence-led decisions, communicate limitations and escalate appropriately.
Present a portfolio-ready capstone and development plan.
Objective map
A numbered, measurable syllabus
Every lesson, knowledge check and practical activity maps to the objectives below. Domain weights show how much of the programme each area represents.
Domain 1
Cloud Security Foundations: role and foundations to Access
- 1.1Explain and distinguish cloud security foundations: role and foundations in a realistic cloud security foundations context: establish the purpose, professional boundaries and workplace context for cloud security foundations.
- 1.2Demonstrate shared responsibility in a realistic cloud security foundations context: apply shared responsibility to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
- 1.3Demonstrate access in a realistic cloud security foundations context: apply access to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Domain 2
Data protection to Incident readiness
- 2.1Demonstrate data protection in a realistic cloud security foundations context: apply data protection to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
- 2.2Demonstrate logging in a realistic cloud security foundations context: apply logging to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
- 2.3Demonstrate incident readiness in a realistic cloud security foundations context: apply incident readiness to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Domain 3
Cloud-risk decisions to Portfolio lab: Cloud Security Foundations case
- 3.1Demonstrate cloud-risk decisions in a realistic cloud security foundations context: apply cloud-risk decisions to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
- 3.2Explain and distinguish integrated cloud security foundations workflow in a realistic cloud security foundations context: connect the programme topics into one controlled workflow with clear inputs, checks, handover points and escalation boundaries.
- 3.3Complete and defend portfolio lab: cloud security foundations case in a realistic cloud security foundations context: create a portfolio-safe cloud security foundations artefact from a realistic workplace scenario and explain the choices made.
Domain 4
Final Cloud Security Foundations capstone
- 4.1Complete and defend final cloud security foundations capstone in a realistic cloud security foundations context: complete and review an end-to-end cloud security foundations case with evidence, quality checks, limitations and a professional recommendation.
How the programme works
Learn, practise, explain and prove it
This is a long-form, eight-week guided programme rather than a stack of short articles. Each module contains six substantial lessons that move from concepts and methods into a worked case, a quality clinic, a workplace lab and assessed reflection.
1. Guided learning
Study the purpose, process, risks and professional standard through structured readings and active notes.
2. Worked cases
Compare plausible options, expose missing evidence and defend a decision under realistic constraints.
3. Quality clinics and labs
Diagnose weak work, revise it against a rubric and create portfolio evidence with a full audit trail.
4. Hard assessment
Pass applied checks and the final assessment at 85%, with no unresolved critical-error questions.
Curriculum
A complete programme, module by module
The curriculum below shows the actual learning pathway, objective and evidence for every module. Full lessons remain locked until enrolment.
Build the base
Standards, vocabulary and the core method you will use throughout the programme.
01Cloud Security Foundations: role and foundationsEstablish the purpose, professional boundaries and workplace context for cloud security foundations.+
Measured objectiveExplain and distinguish cloud security foundations: role and foundations in a realistic cloud security foundations context: establish the purpose, professional boundaries and workplace context for cloud security foundations.
Evidence you will produceA technical cloud security foundations: role and foundations brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
02Shared responsibilityApply shared responsibility to a realistic cloud security foundations brief, documenting the decision, evidence and next action.+
Measured objectiveDemonstrate shared responsibility in a realistic cloud security foundations context: apply shared responsibility to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Evidence you will produceA technical shared responsibility brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
03AccessApply access to a realistic cloud security foundations brief, documenting the decision, evidence and next action.+
Measured objectiveDemonstrate access in a realistic cloud security foundations context: apply access to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Evidence you will produceA technical access brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can explain the fundamentals and complete a first guided task.
Develop core skills
The working skills and tools of the role, practised one at a time.
04Data protectionApply data protection to a realistic cloud security foundations brief, documenting the decision, evidence and next action.+
Measured objectiveDemonstrate data protection in a realistic cloud security foundations context: apply data protection to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Evidence you will produceA checked working paper, analysis or report for data protection, including source data, assumptions, calculations, findings and limitations.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
05LoggingApply logging to a realistic cloud security foundations brief, documenting the decision, evidence and next action.+
Measured objectiveDemonstrate logging in a realistic cloud security foundations context: apply logging to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Evidence you will produceA technical logging brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
06Incident readinessApply incident readiness to a realistic cloud security foundations brief, documenting the decision, evidence and next action.+
Measured objectiveDemonstrate incident readiness in a realistic cloud security foundations context: apply incident readiness to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Evidence you will produceA technical incident readiness brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can carry out routine work independently and check it properly.
Apply it in realistic scenarios
Case studies and simulations with competing priorities and incomplete information.
07Cloud-risk decisionsApply cloud-risk decisions to a realistic cloud security foundations brief, documenting the decision, evidence and next action.+
Measured objectiveDemonstrate cloud-risk decisions in a realistic cloud security foundations context: apply cloud-risk decisions to a realistic cloud security foundations brief, documenting the decision, evidence and next action.
Evidence you will produceA technical cloud-risk decisions brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
08Integrated Cloud Security Foundations workflowConnect the programme topics into one controlled workflow with clear inputs, checks, handover points and escalation boundaries.+
Measured objectiveExplain and distinguish integrated cloud security foundations workflow in a realistic cloud security foundations context: connect the programme topics into one controlled workflow with clear inputs, checks, handover points and escalation boundaries.
Evidence you will produceA technical integrated cloud security foundations workflow brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
09Portfolio lab: Cloud Security Foundations caseCreate a portfolio-safe cloud security foundations artefact from a realistic workplace scenario and explain the choices made.+
Measured objectiveComplete and defend portfolio lab: cloud security foundations case in a realistic cloud security foundations context: create a portfolio-safe cloud security foundations artefact from a realistic workplace scenario and explain the choices made.
Evidence you will produceA technical portfolio lab: cloud security foundations case brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You can make and justify decisions in realistic situations.
Prove it and plan your next step
Portfolio evidence, final review and a development plan you can show an employer.
10Final Cloud Security Foundations capstoneComplete and review an end-to-end cloud security foundations case with evidence, quality checks, limitations and a professional recommendation.+
Measured objectiveComplete and defend final cloud security foundations capstone in a realistic cloud security foundations context: complete and review an end-to-end cloud security foundations case with evidence, quality checks, limitations and a professional recommendation.
Evidence you will produceA technical final cloud security foundations capstone brief with requirements, safe method, sample output or architecture, validation evidence and handover notes.
Six guided lessons + worked case + quality clinic + workplace lab + hard knowledge check
Milestone: You have portfolio-ready evidence and a clear next step.
Suggested pace
Eight-week study plan
Plan for roughly 5–9 hours each week across readings, worked cases, practice, portfolio production and assessment remediation. Repeat a week when the knowledge checks show a gap.
Week 1
Cloud Security Foundations: role and foundations to Shared responsibility
- •Complete the six guided lessons for Cloud Security Foundations: role and foundations and Shared responsibility and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the cloud security foundations: role and foundations and shared responsibility portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 2
Access
- •Complete the six guided lessons for Access and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the access portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 3
Data protection
- •Complete the six guided lessons for Data protection and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the data protection portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 4
Logging
- •Complete the six guided lessons for Logging and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the logging portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 5
Incident readiness to Cloud-risk decisions
- •Complete the six guided lessons for Incident readiness and Cloud-risk decisions and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the incident readiness and cloud-risk decisions portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 6
Integrated Cloud Security Foundations workflow
- •Complete the six guided lessons for Integrated Cloud Security Foundations workflow and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the integrated cloud security foundations workflow portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 7
Portfolio lab: Cloud Security Foundations case
- •Complete the six guided lessons for Portfolio lab: Cloud Security Foundations case and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the portfolio lab: cloud security foundations case portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Reach at least 85% on the week’s checks, resolve every critical error and save the reviewed portfolio evidence before continuing.
Week 8
Final Cloud Security Foundations capstone
- •Complete the six guided lessons for Final Cloud Security Foundations capstone and build structured notes against the objective codes.
- •Analyse the worked case, compare two defensible options and submit a reasoned decision record.
- •Complete the quality clinic, correct the weak draft and document every revision against the rubric.
- •Produce the final cloud security foundations capstone portfolio evidence and complete the hard knowledge checks.
- •Review every incorrect answer, explain why each distractor fails and schedule targeted retrieval practice.
Checkpoint: Submit the capstone evidence pack, defend the key decision, remediate every weak objective and pass the final assessment at 85% with no critical misses.
Technology & security
Continue your learning path
AI for Work & Prompting
Use generative AI responsibly to research, write, analyse and improve everyday work.
60–72 hours
AI Product Management
Plan responsible AI-enabled products around people, value and risk.
50–60 hours
API & Integration Foundations
Understand how systems exchange information safely and reliably.
55–66 hours
Assessment and certificate
A scenario-led cloud security foundations case, practical portfolio review and final knowledge assessment. It is a UGEN ACADEMY completion record, not an external professional credential.
Who this is for
- ✓Learners exploring technology careers.
- ✓Job seekers building practical cloud security foundations evidence.
- ✓Professionals developing a structured new capability.