Skip to main content

Runtime Detection and Response: CSPM and CWPP

This generated surface maps a learner-facing curriculum unit to its canonical source routes.

Curriculum surface

  • Open learner-facing unit
  • Curriculum path: content/curriculum/production/semester-09-cloud-devops/module-05-cloud-security-observability/concepts/cluster-03-network-and-runtime-security/09-runtime-detection-cspm-cwpp-primary.md
  • App: production
  • Semester: semester-09-cloud-devops
  • Module: module-05-cloud-security-observability
  • Unit kind: concept
  • Curation level: module_curated

Learning objectives

  • Explain Runtime Detection and Response: CSPM and CWPP as the joint problem of seeing system behavior and reducing exposure, rather than as separate checklists for tooling and compliance.
  • Use Runtime Detection and Response: CSPM and CWPP to reason about detection, response, access boundaries, and the operational meaning of trustworthy signals.
  • Use building-secure-and-reliable-systems, software-engineering-at-google, the-linux-command-line to connect the learner explanation to logs, metrics, tracing, identity, secrets, and incident-oriented design.

Prerequisites

  • Comfort with deployed cloud systems, pipeline-driven change, and the idea that operations require both visibility and control boundaries.

Source books

  • building-secure-and-reliable-systems
  • software-engineering-at-google
  • the-linux-command-line

Source routes

Building Secure And Reliable Systems

Software Engineering At Google

The Linux Command Line

Supporting curriculum routes

No supporting curriculum routes linked yet.

External enrichment

  • OpenTelemetry Documentation (official_docs_companion) - Connects observability concepts to a vendor-neutral telemetry model learners can reuse across stacks.
  • OWASP Top 10 (official_docs_companion) - Keeps security discussion tied to concrete risk categories instead of abstract compliance language.

AI companion modes

  • Explain simply
  • Socratic tutor
  • Challenge my understanding
  • Diagnose my confusion
  • Generate extra practice

Source-of-truth note

This teaching unit is learner-facing guidance assembled from multiple canonical book routes. Use the listed source books as the primary conceptual spine for Runtime Detection and Response: CSPM and CWPP, and treat outside material as supporting enrichment only.