Certified Cloud Security Professional (CCSP) Training

About Course

The Certified Cloud Security Professional (CCSP) certification is globally recognized and validates expertise in cloud security architecture, design, operations, and compliance based on the (ISC)² CBK. Aimed at professionals involved in cloud security and architecture, it demonstrates proficiency in securing cloud environments and aligning security protocols with organizational goals. CCSP enhances career opportunities by validating skills in cloud security, ensuring professionals can implement and manage robust cloud security solutions effectively to protect data, applications, and infrastructure in cloud environments, thereby meeting compliance requirements and mitigating risks associated with cloud adoption.

Course Content

Module 01 – Cloud Concepts, Architecture, and Design

1.1 Security concepts
1.2 Defense in due care, depth, and due diligence
1.3 Security functionalities and controls
1.4 Concepts of Cloud Computing
1.5 Business drivers
1.6 Elasticity, scalability, vendor lock-in, and vendor lock-out
1.7 Advantages of Cloud Computing concepts
1.8 Architecture of cloud reference
1.9 Cloud Computing: Actors and roles
1.10 Categories of cloud service: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
1.11 Management of cloud service categories
1.12 Deployment models of cloud: Public cloud, private cloud, hybrid cloud, and community cloud
1.13 Characteristics and models
1.14 Cloud deployment models: Comparison
1.15 Cloud technology roadmap
1.16 Related technologies and the impact
1.17 Key management, cryptography, and other concepts of security
1.18 Access control and IAM
1.19 Data remanence
1.20 Cloud Computing: Threats
1.21 Virtualization
1.22 Secure Cloud Computing: Design principles
1.23 Analysis of costs and benefits
1.24 Cloud service providers: Evaluation
1.25 SOC
1.26 Evaluating IT security
1.27 FIPS

Module 02 – Cloud Data Security

2.1 Life cycle of cloud data: Create, use, store, and share
2.2 Life cycle of cloud data: Archive
2.3 Life cycle of cloud data: Destroy and other key data functions
2.4 Architectures of cloud data storage types: IaaS, PaaS, and SaaS
2.5 Architectures of cloud data storage: Storage types and threats
2.6 Strategies of data security: Encryption challenges, IaaS encryption, encryption of databases, key management, cloud key storage, masking, tokenization, data anonymization, bit splitting, homomorphic encryption, and data loss prevention
2.7 Data classification and discovery technology: Data classification and cloud data challenges
2.8 Jurisdictional data protections for Personally Identifiable Information (PII)
2.9 Privacy acts: GDPR, and policies of data protection
2.10 Privacy acts: HIPAA, FISMA, and SOX
2.11 Jurisdictional data protection for PII: Cloud services responsibilities
2.12 Management of data rights
2.13 Data retention and deletion
2.14 Archiving policies
2.15 Legal hold
2.16 Auditability, accountability, and traceability of data events
2.17 SIEM
2.18 Custody chain
2.19 Nonrepudiation

Module 03 – Cloud Platform and Infrastructure Security

3.1 Components of cloud infrastructure
3.2 Communications and network
3.3 Virtualization and management plane
3.4 Factors impacting data center design
3.5 Physical design: Buy or build, design standards of a data center, uptime institute, tiers, and features of tier
3.6 Considerations of environmental design
3.7 Connectivity
3.8 Resource allocation and hypervisor
3.9 Risks associated using cloud infrastructure
3.10 Policy, general, and virtualization risks
3.11 Cloud-specific and non-cloud-Specific risks, along with legal ones
3.12 Compensating controls and cloud attack vectors
3.13 Designing and planning security controls
3.14 Business continuity plan and disaster recovery
3.15 Disruptive events and BCDR planning factors
3.16 Cloud infrastructure characteristics
3.17 Strategies of BCDR and returning to normal
3.18 Creation of BCDR: Test, revise, and report
3.19 Testing types, availability, uptime, and activity
3.20 Security awareness and training

Module 04 – Cloud Application Security

4.1 Application security: Awareness and advocate training
4.2 Common pitfalls
4.3 Awareness of encryption dependency
4.4 Understanding the Software Development Life Cycle (SDLC) process
4.5 Risks and vulnerabilities
4.6 Threat modeling
4.7 Encryption
4.8 Application virtualization and sandboxing
4.9 Federated identity management
4.10 Authentication of SAML
4.11 Identity and Access Management (IAM) and Multi-factor Authentication (MFA)
4.12 Cloud access security broker
4.13 Security testing of application
4.14 Supply chain management of software

Module 05 – Cloud Security Operations

5.1 Hardware secure configuration: Servers, storage controllers, and virtual switches
5.2 VM tools configuration: Physical infrastructure running
5.3 Configuration of securing the network
5.4 Clustered hosts
5.5 Clustered storage and dynamic optimization
5.6 Patch management and maintenance mode
5.7 Performance monitoring
5.8 Network security controls: Honeypots, layered security, and SIEM
5.9 Log management and orchestration
5.10 Guest OS availability
5.11 Operations management
5.12 Process of risk management: Framing of risks and risk assessment
5.13 Quantitative risk analysis
5.14 Risk monitoring and response
5.15 Preservation and collection of digital evidence
5.16 Communication using relevant parties
5.17 Center of security operations

Module 06 – Legal Risk and Compliance

6.1 Concepts of legislative
6.2 Intellectual property laws
6.3 Agreements and acts
6.4 NERC
6.5 Generally accepted privacy principles (GAPP) and privacy shield
6.6 Data privacy jurisdictional difference
6.7 E-discovery and related terminology
6.8 PII and forensic requirements
6.9 SOC reports, gap analysis, and chain of custody
6.10 Vendor management
6.11 Risk attitude and Cloud Computing policies
6.12 SLA
6.13 Quality of Service (QoS)
6.14 Risk mitigation and risk management metrics
6.15 ISO 28000:2007

About Course

What Will You Learn?

Course Content

Module 01 – Cloud Concepts, Architecture, and Design

1.1 Security concepts

1.2 Defense in due care, depth, and due diligence

1.3 Security functionalities and controls

1.4 Concepts of Cloud Computing

1.5 Business drivers

1.6 Elasticity, scalability, vendor lock-in, and vendor lock-out

1.7 Advantages of Cloud Computing concepts

1.8 Architecture of cloud reference

1.9 Cloud Computing: Actors and roles

1.10 Categories of cloud service: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)

1.11 Management of cloud service categories

1.12 Deployment models of cloud: Public cloud, private cloud, hybrid cloud, and community cloud

1.13 Characteristics and models

1.14 Cloud deployment models: Comparison

1.15 Cloud technology roadmap

1.16 Related technologies and the impact

1.17 Key management, cryptography, and other concepts of security

1.18 Access control and IAM

1.19 Data remanence

1.20 Cloud Computing: Threats

1.21 Virtualization

1.22 Secure Cloud Computing: Design principles

1.23 Analysis of costs and benefits

1.24 Cloud service providers: Evaluation

1.25 SOC

1.26 Evaluating IT security

1.27 FIPS

Module 02 – Cloud Data Security

2.1 Life cycle of cloud data: Create, use, store, and share

2.2 Life cycle of cloud data: Archive

2.3 Life cycle of cloud data: Destroy and other key data functions

2.4 Architectures of cloud data storage types: IaaS, PaaS, and SaaS

2.5 Architectures of cloud data storage: Storage types and threats

2.6 Strategies of data security: Encryption challenges, IaaS encryption, encryption of databases, key management, cloud key storage, masking, tokenization, data anonymization, bit splitting, homomorphic encryption, and data loss prevention

2.7 Data classification and discovery technology: Data classification and cloud data challenges

2.8 Jurisdictional data protections for Personally Identifiable Information (PII)

2.9 Privacy acts: GDPR, and policies of data protection

2.10 Privacy acts: HIPAA, FISMA, and SOX

2.11 Jurisdictional data protection for PII: Cloud services responsibilities

2.12 Management of data rights

2.13 Data retention and deletion

2.14 Archiving policies

2.15 Legal hold

2.16 Auditability, accountability, and traceability of data events

2.17 SIEM

2.18 Custody chain

2.19 Nonrepudiation

Module 03 – Cloud Platform and Infrastructure Security

3.1 Components of cloud infrastructure

3.2 Communications and network

3.3 Virtualization and management plane

3.4 Factors impacting data center design

3.5 Physical design: Buy or build, design standards of a data center, uptime institute, tiers, and features of tier

3.6 Considerations of environmental design

3.7 Connectivity

3.8 Resource allocation and hypervisor

3.9 Risks associated using cloud infrastructure

3.10 Policy, general, and virtualization risks

3.11 Cloud-specific and non-cloud-Specific risks, along with legal ones

3.12 Compensating controls and cloud attack vectors

3.13 Designing and planning security controls

3.14 Business continuity plan and disaster recovery

3.15 Disruptive events and BCDR planning factors

3.16 Cloud infrastructure characteristics

3.17 Strategies of BCDR and returning to normal

3.18 Creation of BCDR: Test, revise, and report

3.19 Testing types, availability, uptime, and activity

3.20 Security awareness and training

Module 04 – Cloud Application Security

4.1 Application security: Awareness and advocate training

4.2 Common pitfalls

4.3 Awareness of encryption dependency

4.4 Understanding the Software Development Life Cycle (SDLC) process

4.5 Risks and vulnerabilities

4.6 Threat modeling

4.7 Encryption