Official ISC2 Certified Cloud Security Professional (CCSP) Training - Including Exam

This training is intended for professionals who have at least five years of full-time IT experience, including three years in information security and at least one year in cloud security, and are pursuing CCSP certification to enhance credibility and career mobility. Example job functions include, but are not limited to: Enterprise Architect; Security Administrator; Systems Engineer; Security Architect; Security Consultant; Security Engineer; Security Manager; Systems Architect.

After Completing this course you should be able to:

• Understand legal frameworks and guidelines that affect cloud services.
• Recognize the fundamentals of data privacy regulatory/legislative mandates.
• Assess risks, vulnerability, threats and attacks in the cloud environment.
• Evaluate the design and plan for cloud infrastructure security controls.
• Evaluate what is necessary to manage security operations.
• Understand what operational controls and standards to implement.
• Describe the types of cloud deployment models in the types of as a service cloud models currently available today.
• Identify key terminology and associated definitions related to cloud technology. Be able to establish a common terminology for use within a team or workgroup.
• Build a business case for cloud adoption and be able to determine with business units the benefits of the cloud and cloud migration strategies.

1.1 Understand cloud computing concepts

1.2 Describe cloud reference architecture

1.3 Understand security concepts relevant to cloud computing

1.4 Understand design principles of secure cloud computing

1.5 Evaluate cloud service providers

2.1 Describe cloud data concepts

2.2 Design and implement cloud data storage architectures

2.3 Design and apply data security technologies and strategies

2.4 Implement data discovery

2.5 Plan and implement data classification

2.6 Design and implement Information Rights Management (IRM)

2.7 Plan and implement data retention, deletion, and archiving policies

2.8 Design and implement auditability, traceability, and accountability of data events

3.1 Comprehend cloud infrastructure and platform components

3.2 Design a secure data center

3.3 Analyze risks associated with cloud infrastructure and platforms

3.4 Plan and implementation of security controls

3.5 Plan business continuity (BC) and disaster recovery (DR)

4.1 Advocate training and awareness for application security

4.2 Describe the Secure Software Development Life Cycle (SDLC) process

4.3 Apply the Secure Software Development Life Cycle (SDLC)

4.4 Apply cloud software assurance and validation

4.5 Use verified secure software

4.6 Comprehend the specifics of cloud application architecture

4.7 Design an appropriate identity and access management (IAM) solution

5.1 Build and implement physical and logical infrastructure for the cloud environment

5.2 Operate and maintain physical and logical infrastructure for cloud environment

5.3 Implement operational controls and standards

5.4 Support digital forensics

5.5 Manage communication with relevant parties

5.6 Manage security operations

6.1 Articulate legal requirements and unique risks within the cloud environment

6.2 Understand privacy issues

6.3 Understand audit process, methodologies, and required adaptations for a cloud environment

6.4 Understand implications of cloud to enterprise risk management

6.5 Understand outsourcing and cloud contract design

Candidates must have a minimum of 5 years cumulative paid work experience in information technology, of which 3 years must be in information security and 1 year in 1 or more of the 6 domains of the CCSP CBK. Earning CSA’s CCSK certificate can be substituted for 1 year of experience in 1 or more of the 6 domains of the CCSP CBK. Earning (ISC)²’s CISSP credential can be substituted for the entire CCSP experience requirement.

A candidate that doesn’t have the required experience to become a CCSP may become an Associate of (ISC)² by successfully passing the CCSP examination. The Associate of (ISC)² will then have 6 years to earn the 5 years required experience. You can learn more about CCSP experience requirements and how to account for part-time work and internships at www.isc2.org/Certifications/CCSP/experience-requirements.

• CISSP - Official ISC2 Certified Information Systems Security Professional Training (CISSP) - Including Exam

Recommended as preparation for the following exam:

• (ISC)2 Certified Cloud Security Professional

To qualify for this cybersecurity certification, you must pass the exam and have at least five years of cumulative work experience in information technology, of which three years must be in information security, and one year in one or more of the six domains of the ISC2 CCSP Exam Outline.

Learn more about CCSP Experience Requirements.

Don't have enough experience yet? You can still pass the CCSP exam and become an Associate of ISC2 while you earn the required work experience.

Please note an exam voucher is included as part of this course