3. Cloud Platform & Infrastructure Security

3.1 Comprehend Cloud Infrastructure Components
»» Physical Environment
»» Network and Communications
»» Compute
»» Virtualization
»» Storage
»» Management Plane
3.2 Analyze Risks Associated to Cloud Infrastructure
»» Risk Assessment/Analysis
»» Cloud Attack Vectors
»» Virtualization Rısks
»» Counter-Measure Strategies (e.g., access controls, design principles)
3.3 Design and Plan Security Controls 
»» Physical and Environmental Protection (e.g., on-premise)
»» System and Communication Protection
»» Virtualization Systems Protection
»» Management of Identification,Authentication and Authorization in Cloud Infrastructure
»» Audit Mechanisms
3.4 Plan Disaster Recovery and Business Continuity Management
»» Understanding of the Cloud Environment
»» Understanding of the Business Requirements
»» Understanding of the Risks
»» Disaster Recovery/Business Continuity strategy
»» Creation of the Plan
»» Implementation of the Plan