CCSP Certified Cloud Security Professional

Certified Cloud Security Professional course provides in-depth knowledge to the delegates about the information security risks and mitigation strategies. The CCSP course provides complete understanding to the delegates about the cloud software assurance and validation, utilising secure software, and the controls necessary for developing secure cloud environments.  At the end of the training, the delegates will able to identify privacy issues and audit processes utilised within a cloud environment, including assurance issues, auditing controls and the specific reporting attributes.

CCSP course aims to develop and enhance an IT professional's knowledge and skills. The course provides in-depth knowledge to the delegates about the cloud computing, cloud computing security concepts, cloud reference architecture and cloud services. Throughout the training, the delegates will be able to understand how to apply Business Continuity Planning and Disaster Recovery procedures for disaster situations. The delegates will understand the challenges for data centre design, cloud environment deployments and forensic analysis. With the help of this training, the delegates will be able to understand the architecture of cloud reference.

Introduction and Course Overview

Architectural Concepts and Designs Requirements

• Overview of Important cloud computing concepts
• Understand about the Cloud reference architecture
• Security concepts relevant to cloud computing
• Security design principles of cloud computing
• Introduction to the Trusted cloud services

Cloud Platform and Infrastructure Security

• Comprehend cloud infrastructure components
• Analyse risks associated with cloud infrastructure
• Understand the design and plan security controls
• Plan disaster recovery and business continuity management

Cloud Data Security

• Overview of cloud data lifecycle
• Design and application of data security strategies
• Design and implementation of cloud data storage architectures
• Implementation of data discovery and classification technologies
• Implementation of data protection for personally identifiable information (PII)
• Design and implementation of Data Rights Management
• Design and implementation of data retention, deletion and archiving policies
• Auditability, traceability and accountability of data events

Overview of Cloud Application Security

• Training and awareness for application security
• Cloud software assurance and validation
• Use of verified secure software
• Understand and apply the Software Development Life-Cycle (SDLC) process
• Comprehend the specifics of Cloud Application Architecture
• Design appropriate Identity and Access Management (IAM) solutions

Operations

• Support the planning process for the data centre design
• Build, run and manage physical infrastructure for a cloud environment
• Build, run and manage logical infrastructure for a cloud environment
• Ensure compliance with various regulations and control requirements
• Conduct risk assessments for logical and physical infrastructure
• Collection, acquisition and preservation of digital evidence
• Manage communication with relevant parties

Legal and Compliance

• Legal requirements and unique risks within the cloud environment
• Privacy issues, including jurisdictional variation
• The audit process and methodologies adapted for the cloud environment
• Implications of the cloud to enterprise risk management
• Outsourcing and cloud contract design
• Vendor management