Certified Cloud Security Professional (CCSP)

The goal of the course is to prepare professionals for the challenging CCSP exam by covering the objectives of the exam based on the six domains as defined in the (ISC)² CCSP common body of knowledge.

Who Should Attend

The CCSP is ideal for IT and information security leaders responsible for applying best practices to cloud security architecture, design, operations and service orchestration.

Course Objectives

Upon completing this course, the participants will gain valuable knowledge and skills including the ability to:

• Successfully pass the CCSP exam.
• Understand the fundamentals of the cloud computing architecture framework.
• Understand security challenges associated with different types of cloud services.
• Identify and evaluate security risks for their organization’s cloud environments.
• Select and implement appropriate controls to ensure secure implementation of cloud services.
• Thoroughly understand the 6 essential core domains of the CCSP common body of knowledge:
  1. Architectural Concepts & Design Requirements
  2. Cloud Data Security
  3. Cloud Platform & Infrastructure Security
  4. Cloud Application Security
  5. Operations
  6. Legal & Compliance

Agenda

1. Architectural Concepts and Design Requirements
2. Cloud Computing Concepts
3. Cloud Reference Architecture
4. Cloud Computing Security Concepts
5. Design Principles of Secure Cloud Computing
6. Trusted Cloud Services
7. Cloud Data Security
8. CSA (Cloud Security Alliance) Cloud Data Lifecycle
9. Cloud Data Storage Architectures
10. Data Security Strategies
11. Data Discovery and Classification Technologies
12. Protecting Privacy and PII (Personally Identifiable Information)
13. Data Rights Management
14. Data Retention, Deletion, and Archiving Policies
15. Auditability, Traceability, and Accountability of Data Events
16. Cloud Platform and Infrastructure Security
17. Cloud Infrastructure Components
18. Cloud Infrastructure Risks
19. Designing and Planning Security Controls
20. Disaster Recovery and Business Continuity Management
21. Cloud Application Security
22. The Need for Security Awareness and Training in application Security
23. Cloud Software Assurance and Validation
24. Verified Secure Software
25. SDLC (Software Development Life Cycle) Process
26. Secure SDLC
27. Specifics of Cloud Application Architecture
28. Secure IAM (Identity and Access Management) Solutions
29. Operations
30. Planning Process for the Data Center Design
31. Installation and Configuration of Physical Infrastructure for Cloud Environment
32. Running Physical Infrastructure for Cloud Environment
33. Managing Physical Infrastructure for Cloud Environment
34. Installation and Configuration of Logical Infrastructure for Cloud Environment
35. Running Logical Infrastructure for Cloud Environment
36. Managing Logical Infrastructure for Cloud Environment
37. Compliance with Regulations and Controls
38. Risk Assessment for Logical and Physical Infrastructure
39. Collection, Acquisition, and Preservation of Digital Evidence
40. Managing Communication with Stakeholders
41. Legal and Compliance
42. Legal Requirements and Unique Risks within the Cloud Environment
43. Relevant Privacy and PII Laws and Regulations
44. Audit Process, Methodologies, and Required Adaptions for a Cloud Environment
45. Implications of Cloud to Enterprise Risk Management
46. Outsourcing and Cloud Contract Design
47. Vendor Management