المنصة العربية للدراسات المهنيةArab Platform for Professional Studies
العربية
Professional Mini-Master Data, AI, Digital, IT & Cybersecurity Cybersecurity for Business

Professional Mini-Master in Cloud Security and Zero-Trust Architecture

Professional Mini-Master in Cloud Security and Zero-Trust Architecture is a free program on ARPS, the Arab Platform for Professional Studies. Design a testable cloud security and zero-trust architecture, from resource boundaries to migration decisions. Five connected advanced modules cover trust-boundary inventory and threat modeling; human and workload identity and policy enforcement; data, network, build and recovery controls; detection and response.

Start the first subject free Enroll and start learning — free Curriculum
A cloud icon on a glass square with data charts Studying is completely free
Estimated time
34 hours
subjects
5
lessons
25
Study language
Arabic and English

Optional certificate fee 50% launch discount

$120 instead of $240

441 AED or 450 SAR

Start the first subject free Fees by route

Program facts

Study fee
Free
subjects
5
lessons
25
Estimated time
34 hours
Content last reviewed
Access period
60 days
Study language
Arabic and English

About the program

Five connected advanced modules cover trust-boundary inventory and threat modeling; human and workload identity and policy enforcement; data, network, build and recovery controls; detection and response; and migration trade-offs and governance. Every lesson includes an explanation, solved fictional case and guided exercise. Decisions require evidence for legitimate access and denial, service-performance limits and explicit risk assumptions. A product name or control framework alone does not prove implementation.

Practical relevance

Exercises use fictional data without paid cloud accounts or workplace secrets. Apply the decision method at work only with permission and suitable data.

Why this program

A gateway policy may pass tests while a legacy route still reaches a data store directly. This program connects each policy decision to enforcement, logging and a discriminating test, while considering service continuity. It ends with a risk-board decision to expand or repair based on reproducible evidence.

Career relevance

Relevant to cloud security architecture, identity, incident response and risk roles. It does not promise employment, promotion or regulated professional authority.

What you will learn

  • Define protect surfaces and trust boundaries with testable threat assumptions
  • Design contextual access decisions for people and workloads with failure handling
  • Select data, network, pipeline and recovery controls under constraints
  • Use telemetry to investigate and contain incidents while preserving service
  • Defend a staged migration with measurable residual risk
Learning outcomes (5)
  1. Define protect surfaces and trust boundaries with testable threat assumptions
  2. Design contextual access decisions for people and workloads with failure handling
  3. Select data, network, pipeline and recovery controls under constraints
  4. Use telemetry to investigate and contain incidents while preserving service
  5. Defend a staged migration with measurable residual risk

Who it is for

  • Security architects and cloud, identity and risk practitioners with relevant foundations
  • Security engineers and cloud architects who design or review identity, network and data controls in multi-account environments.
  • Operations and incident-response leads and risk officers who need to assess migration plans towards zero trust with measurable evidence.

Prerequisites

  • IAM, networking and cloud service fundamentals
  • Ability to read technical logs and compare performance and risk measures
  • Practical understanding of networking, identity and access concepts in at least one cloud environment, and the ability to read an architecture diagram and a simple access policy.
  • Willingness to document architectural decisions and their assumptions, and to use only test environments or authorized data in the exercises.

Curriculum

  1. Subject 1 Open for free

    Trust boundaries and threat model

    Define the protect surface, trust crossings and evidence for an access decision.

    5 lessons · 6.5 hours

    1. Inventory assets and data flows as trust boundaries 1.5 hours
    2. Define protect surfaces and access paths 1.5 hours
    3. Model privilege misuse and escalation 1.5 hours
    4. Allocate provider and customer control responsibilities 1.5 hours
    5. Record an architectural decision and its assumptions 1.5 hours
  2. Subject 2

    Identity and continuous policy

    Turn identity and context into enforceable, revocable and measurable decisions.

    5 lessons · 6.5 hours

    1. Design human and workload identities 1.5 hours
    2. Design a contextual access decision 1.5 hours
    3. Time-bound privilege and secret lifecycle 1.5 hours
    4. Implement policy at enforcement points and test failure 1.5 hours
    5. Measure policy impact on service 1.5 hours
  3. Subject 3

    Data, network and workloads

    Control data flows, service paths, build provenance and recovery.

    5 lessons · 6.5 hours

    1. Classify data and map key paths 1.5 hours
    2. Segment services and east-west traffic 1.5 hours
    3. Control data egress and API mediation 1.5 hours
    4. Secure image build and deployment provenance 1.5 hours
    5. Restore service without reopening trust boundaries 1.5 hours
  4. Subject 4

    Detection, response and resilience

    Use telemetry, containment and recovery to evidence the risk boundary.

    5 lessons · 6.5 hours

    1. Engineer access-decision telemetry 1.5 hours
    2. Detect identity and token misuse 1.5 hours
    3. Investigate across accounts and clouds 1.5 hours
    4. Contain incidents while sustaining essential work 1.5 hours
    5. Rehearse recovery and assess evidence 1.5 hours
  5. Subject 5

    Migration, governance and evaluation

    Sequence dependencies, compare alternatives and close exceptions with evidence.

    5 lessons · 6.5 hours

    1. Sequence migration by dependencies 1.5 hours
    2. Select controls and verifiable outcomes 1.5 hours
    3. Compare architectural options and operating cost 1.5 hours
    4. Test policy drift and govern exceptions 1.5 hours
    5. Defend a risk-council decision and next steps 1.5 hours

Subjects unlock in sequence as you progress.

Strengths

  • Integrated cases linking decisions to enforcement and evidence
  • Decision exercises with reference answers and explicit assumptions
  • An integrated final and module results from the same attempt

Evidence basis

Scoped concepts draw on primary NIST, CISA, CSA and other publisher sources. Case figures are fictional teaching data; source citation is neither endorsement nor a universal implementation mandate.

Reference organizations

  • NIST
  • CISA
  • Cloud Security Alliance

Frameworks used

  • NIST SP 800-207 — 2020
Methodology

Scoped concepts draw on primary NIST, CISA, CSA and other publisher sources. Case figures are fictional teaching data; source citation is neither endorsement nor a universal implementation mandate.

Program questions

Who is this program for?

Security architects and cloud and risk practitioners who already know IAM, networking and cloud operations fundamentals.

What will I practice?

You will design trust boundaries, access decisions, a migration plan and validation tests on fictional cases; workplace data are unnecessary.

How is learning assessed?

An automatically scored integrated final draws questions from every topic after the five modules. Self-check exercises include reference answers.

Are modules passed separately?

A transcript accompanying the credential shows module question results from the same qualifying final attempt. Modules have no separate pass test.

Is this a cloud-vendor certificate or university degree?

No. It is an internal professional completion credential, not vendor accreditation, a university degree or a professional license.

Do I need sensitive workplace data?

No. Fictional cases suffice. At work, use only authorized, de-identified data under your organization’s policy.

Is Professional Mini-Master in Cloud Security and Zero-Trust Architecture free, and do I get a certificate?

Yes. Professional Mini-Master in Cloud Security and Zero-Trust Architecture is free on ARPS: every lesson, exercise and assessment is free, the first subject is open to read without an account, and the program is available in Arabic and English. Issuing a certificate is optional; it is a training completion certificate showing you passed the program's assessments, not a university degree, a professional licence or an endorsement by an external body.

What other names is Professional Mini-Master in Cloud Security and Zero-Trust Architecture known by?

The subject of this program is also known as: zero trust architecture, cloud security architecture, Zero Trust security. Learners usually find it by searching for: cloud security course, learn zero trust architecture, free cloud security program, designing secure cloud architecture, online program with completion certificate.

Certificate

The real design with fictional details; opens in a new window.

Verification example: a real issued certificate

Programs from the same field or route that may complement what you learn here.

Start the first subject free Enroll and start learning — free