Jason Hartley is lecturer in criminology at Griffith University in Brisbane, Australia. He is a former police officer with 23 years of experience, and has trained personnel for deployment in Timor Leste, the Solomon Islands, Iraq and Afghanistan. Jason specializes in, and has published on engagement with Muslim communities, Indigenous Polynesian approaches to rehabilitation and reducing recidivism, and Asian Organised Crime. Jason also completed a community internship in Hebron on the West Bank.
ITC520 Cloud and Virtualisation Security
This unit explores the security principles and practices essential for cloud computing and virtualisation environments. Students will examine the security challenges and risks inherent in cloud architectures including public, private, and hybrid clouds, as well as virtualisation technologies. Topics include securing cloud infrastructure, data protection in virtual environments, identity and access management, and compliance with legal and regulatory requirements. The unit also covers incident response and risk management strategies for cloud and virtualisation platforms.
RELEVANT COURSES
* Core unit
CREDIT POINTS
10
STUDY MODES
On campus, online, hybrid
PREREQUISITE OR CO-REQUISITE
ITC404 Foundations of Cybersecurity
UNIT LEARNING OUTCOMES
- Critically appraise cloud and virtualisation security principles
- Critically analyse security threats and vulnerabilities in cloud environments
- Design and justify secure cloud-native architectures – including containerised, serverless, and virtualised workloads – addressing security, compliance, and data-protection requirements
- Develop and implement cloud security strategies, integrating identity and access management, data protection, and incident response protocols
- Propose and articulate cloud and virtualisation security principles and opportunities to persuade specialist and non-specialist audiences
CONTENT
- Cloud and virtualisation security overview
- CSP models & shared-responsibility frameworks
- Threats and vulnerabilities in multi-tenant clouds
- Securing container platforms (Docker, Kubernetes)
- Serverless and Function-as-a-Service security
- Cloud-infrastructure hardening: IaC & DevSecOps pipelines
- Data protection and privacy in cloud systems
- Identity and access management in cloud and virtualisation
- Virtualisation technologies and security considerations
- Cloud security standards and compliance frameworks
- Risk management, incident response, and security testing in cloud and virtual systems
- Emerging and future trends in cloud and virtualisation security
ASSESSMENT METHODS
- Cloud Security Risk Assessment Report – 20%
- Group Design and Oral Presentation – 30%
- Report – 50%
PRESCRIBED READINGS
Check with the lecturer each semester before purchasing any texts












