Cloud Security

A Practitioner’s Field Guide: the complete three-volume set

Each volume stands alone, with its own index. Read in order (Learn, Run, Operate) or take the one you need.

Available soon: not yet on sale. Retailer links appear here when the title goes on sale. Email us to be notified at launch →

Cloud security is shared work between you and your provider. The three volumes go from the core controls, to running it day to day and handling incidents, to the ready-to-use templates.

Companion to the Cloud Security Assessment toolkit: the assessment and ready-to-use templates that put this book to work.

From the blog: Inheriting a cloud account nobody set up properly. An essay-length preview of the same ground this set covers, free.

Volume 1

Foundations and Control Domains

Volume 1 of the three-volume Cloud Security set: foundations and control domains. It covers what cloud security actually is, the shared-responsibility model in practice, cloud asset inventory, the maturity spectrum, and how cloud differs from on-prem. It then works through identity and access management (IAM) at cloud scale, secrets and keys, network and data-plane security, and configuration baselines and drift. It closes on logging and SIEM integration, data security, and workload protection. Volume 2 covers operations and incident response; Volume 3 is the Operator's Workbook. Each volume stands alone. Each is modestly priced in ebook.

350 pages · 18 chapters · own index · 6 × 9 in paperback, hardcover & EPUB · British English
Read Chapter 1 free (PDF) Paperback Hardcover Ebook
Volume 2

Operations and Incident Response

Volume 2 of the three-volume Cloud Security set: operations and incident response. It covers cloud vendor due diligence, contract hygiene, cloud incident response and forensics, and tabletop scenarios. It then works through multi-cloud incident coordination, hybrid environments, and regulated workloads. It closes on the regulatory and architectural horizon, and on annual cadence. Volume 1 covers foundations and control domains; Volume 3 is the Operator's Workbook. Each volume stands alone. Each is modestly priced in ebook.

336 pages · 18 chapters · own index · 6 × 9 in paperback, hardcover & EPUB · British English
Paperback Hardcover Ebook
Volume 3 · Operator's Workbook

The Operator's Workbook

Volume 3 of the three-volume Cloud Security set: the Operator's Workbook. It holds templates for cloud asset inventory, for identity and access management (IAM), and for incident response. It also holds configuration baselines and drift detection, logging and SIEM integration, vendor due diligence, and cloud-specific tabletop exercises. It ends with the template finder, the Cloud Security Glossary, and the Maturity Rubric. Each volume stands alone. Each is modestly priced in ebook.

334 pages · 10 chapters · own index · 6 × 9 in paperback, hardcover & EPUB · British English
Paperback Hardcover Ebook

The set at a glance

Swipe sideways to see the full table →

VolumePagesDepthPrice
Volume 135018 chaptersPaperback $34.99 · Hardcover $44.99 · Ebook $12.99
Volume 233618 chaptersPaperback $34.99 · Hardcover $44.99 · Ebook $12.99
Volume 3 (Workbook)33410 chaptersPaperback $34.99 · Hardcover $44.99 · Ebook $12.99

Where to buy

Cloud Security will be available in paperback, hardcover, and ebook through print-on-demand retailers, each volume sold separately. The links activate the moment the titles list; until then, email us and we’ll tell you at launch.

Prices shown are our retail list prices; buy links activate when these titles are listed for sale. Books are sold through print-on-demand retailers (KDP, IngramSpark, Amazon, and independent bookstores), not through the Sylvan Assurance toolkit store.

Where a review helps

If this book helped, an honest review on Amazon does more for a small independent press than anything else. We never ask for a rating and never offer anything for one.

Where a review helps and what else comes with this book