Certified Cloud Security Professional Certification

Certified Cloud Security Professional Certification Prep

The Certified Cloud Security Professional (CCSP) course is the most comprehensive review of cloud security concepts and industry best practices covering the six domains of the  (ISC)2 Common Body of Knowledge (CBK). CCSP training course provides knowledge in identifying the types of controls necessary to administer various levels of confidentiality, integrity, and availability, with regard to securing data in the cloud. 

You will identify the virtual and physical components of the cloud infrastructure with regard to risk management analysis, including tools and techniques necessary for maintaining a secure cloud infrastructure. You will gain an understanding in cloud software assurance and validation, utilizing secure software, and the controls necessary for developing secure cloud environments. You will identify privacy issues and audit processes utilized within a cloud environment, including auditing controls, assurance issues, and the specific reporting attributes.

The Certified Cloud Security Professional (CCSP) certification prep course from NetCom Learning, the official training partner of the (ISC)2, provides a solid grounding in cloud data security, architecture, and design principles. Taking the CCSP exam prep course will help you earn the CCSP – Certified Cloud Security Professional Certificate.

Who Should Attend

• Security Manager
• Systems Architect
• Systems Engineer
• Security Architect
• Security Consultant
• Security Engineer
• Enterprise Architect
• Security Administrator

Prerequisites

Required

Experienced information security professionals with at least five years of IT experience, including three years of information security and at least one year of cloud security experience.

Recommended

CISSP - Certified Information Systems Security Professional Certification Prep.

Course Objectives

• Recognize the fundamentals of data privacy regulatory/legislative mandates
• Assess risks, vulnerability, threats, and attacks in the cloud environment
• Evaluate the design and plan for cloud infrastructure security controls
• Evaluate what is necessary to manage security operations
• Understand what operational controls and standards to implement
• Describe the types of cloud deployment models in the types of “as a service” cloud models currently available today
• Identify key terminology, and associated definitions related to cloud technology
• Establish a common terminology for use with in your team or workgroup
• Build a business case for cloud adoption and determine business units that benefit from cloud migration strategies

Course Outline

1 Cloud Concepts, Architecture and Design

1. State the essential characteristics of cloud computing
2. Describe the fundamental cloud computing services
3. Describe the cloud computing reference architectures
4. Explain cloud computing activities
5. Compare cloud service capabilities and models
6. Describe cloud deployment models
7. Summarize economic characteristics of cloud computing
8. Evaluate cloud computing ROI and KPI metrics
9. Summarize cloud computing security concepts
10. Describe key security considerations for each service model
11. Analyze key cloud service provider contractual relationship documentsCloud Governance: Legal, Risk and Compliance

• Explain the issues with international conflict of law
  
1. Interpret guidelines for digital forensics
2. Identify the fundamentals of data privacy regulatory/legislative mandates
3. Summarize audit process, methodologies and cloud-ready adaptations
4. Describe risk management related to cloud services
5. Identify due care/diligence activities related to service contracts
• Cloud Data Security
  1. Discuss cloud data security concepts
  2. Describe cryptography
  3. Explain data discovery and classification technologies
  4. Interpret cloud data storage architectures
  5. Analyze information rights management
  6. Assess cloud data security strategies
  7. Compare solutions for cloud data retention, deletion and archival policies
  8. Explain basic security concepts in the cloud
• Cloud Platform and Infrastructure Security
  1. Compare cloud infrastructure components
  2. Select standard practices for implementing a secure data center design
  3. Assess risks, vulnerability, threats and attacks in the cloud environment
  4. Discover components for planning and implementing security controls
  5. Evaluate the design and plan for cloud infrastructure security controls
  6. Appraise appropriate identity and access management (IAM) solutions
  7. Recommend business continuity and disaster recovery (BCDR) standards
• Cloud Application Security
  1. Explain training and awareness solutions for application security
  2. Assess challenges in the secure software development life cycle (SDLC) process
  3. Select a threat model for securing software development
  4. Demonstrate cloud software assurance and validation
  5. Choose verified secure software
  6. Explain the specifics of a cloud application architecture
• Cloud Security Operations
  1. Analyze what is used to manage and operate physical and logical infrastructure of a cloud environment
  2. Discuss operational controls and standards
  3. Identify methodologies for supporting digital forensics
  4. Identify critical communication needs with relevant parties
  5. Define auditability, traceability and accountability of security-relevant data events
  6. Select requirements to implement secure operations