CERTIFIED CLOUD SECURITY PROFESSIONAL (CCSP)

40 hours training

Course Overview

To ensure that Cloud Security professionals have the knowledge, skills, and capabilities required in Cloud security design, implementation, architecture, operations, controls, compliance with regulations and dealing with cloud data security and protection as well as infrastructure security

Course Objectives

After CCSP we will be able to: 

• Cloud Reference Structure Description – Cloud Computing Activities 
• Understand the cloud service (for example, types of application capabilities, types of platform capabilities, types of infrastructure capabilities
• Apply cloud publishing models (for example, Public, Private, Mixed, Community)
• Data and media sterilization (for example, writing, erasing encryption)
• Network security (for example, network security groups)
• Secure virtualization (for example, Hypervisor Security, container security)
• Understanding the design principles for secure cloud computing – the secure cloud data life cycle
• Define functional safety requirements (such as portability, interoperability, and vendor lock)
• Cloud service providers Assessment – Verification of standards (for example, international organization for standardization / International electro technical commission (ISO / IEC) 27017, Payment Card Industry Data Security Standard (PCI DSS)
• Design and implementation of cloud data storage structures – Types of storage (for example, long-term, ephemeral, raw disk)
• Design and implementation of data security technologies and strategies – encryption and key management
• Data loss prevention (DLP) and interference
• Deselect data (such as cloaking)
• Data classification application – mapping
• IRM design and implementation – objectives (e.g. data rights, savings, access models)
• Plan and implement data retention, deletion and archiving policies – data retention policies
• Procedures for deleting data and mechanisms and archiving data
• Designing and implementing audit traceability and accountability – defining event sources and identify attribution requirements
• Record, store and analyze data events
• Understanding the components of cloud infrastructure – physical environment
• Safe data center design – logical design (for example, tenant partitioning, access control)
• Cloud infrastructure risk analysis – risk assessment and analysis, system protection, communications, and virtualization systems
• Development of a Disaster Recovery (DR) and Business Continuity (BC) Plan – Cloud-related risks.

Course Prerequisites

There are no prerequisites to take the CCSP course.