QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Securing Calloway Health's whole data platform along the data platform rail of eight stations: inventory and classification, access architecture, encryption design, key and secret custody, masking and tokenization, activity monitoring, backup and recovery, and warehouse and lake security. The exposures found at the start — 47 shadow databases, a shared dbadmin login, an over-broad claims_admin role and production data copied to test — are closed by a column masking policy that hides member social security numbers from analysts, and by sound design: owned and classified datastores, named just-in-time DBA access, keys in a KMS held by custodians who are not DBAs, and rehearsed restores from immutable backups.
CY-SENIOR-068Senior Level · Database & Data Platform Security Architecture

Database & Data Platform Security Architecture — The Data Platform Rail

A senior architecture course that designs and hardens security across an entire enterprise data platform - hundreds of relational and NoSQL databases, a cloud data warehouse, and a data lake - not one database at a time. Work the data platform rail - eight stations: Inventory & Classification, Access Architecture, Encryption Design, Key & Secret Custody, Masking & Tokenization, Activity Monitoring, Backup & Recovery Design, and Warehouse & Lake Security - with real SQL grants and policies, cloud database configuration, KMS commands, DAM and audit queries, and warehouse and lakehouse policy DDL. Four hands-on activities in every lesson.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Build a continuously discovered, owned, and classified inventory across every relational and NoSQL datastore, including shadow databases.
  • Architect centralized, least-privilege, just-in-time access and service identities in place of shared accounts and standing privilege.
  • Design encryption deliberately - TDE, application-level, and field-level - in transit everywhere, scoped to real risk and real performance cost.
  • Put keys and secrets in KMS/HSM custody, separated from database administration, rotated, and controlled directly in cloud databases.

Price:৳10,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.