Certified Cloud Security Professional

Course Description

(ISC)² developed the Certified Cloud Security Professional (CCSP) credential to ensure that cloud security professionals have the required knowledge, skills, and abilities in cloud security design, implementation, architecture, operations, controls, and compliance with regulatory frameworks. A CCSP applies information security expertise to a cloud computing environment and demonstrates competence in cloud security architecture, design, operations, and service orchestration. This professional competence is measured against a globally recognized body of knowledge.

The topics included in the CCSP Common Body of Knowledge (CBK) ensure its relevancy across all disciplines in the field of cloud security. Successful candidates are competent in the following 6 domains:

• Cloud Concepts, Architecture and Design
• Cloud Data Security
• Cloud Platform & Infrastructure Security
• Cloud Application Security
• Cloud Security Operations
• Legal, Risk, and Compliance

Program Objectives

• Understand the legal frameworks and guidelines that affect cloud services.
• Recognize the fundamentals of data privacy regulatory/legislative mandates
• Assess risks, vulnerability, threats, and attacks in the cloud environment.
• Evaluate the design and plan for cloud infrastructure security controls.
• Evaluate what is necessary to manage security operations.
• Understand what operational controls and standards to implement.
• Describe the types of cloud deployment models in the types of “as a service” cloud models currently available today.
• Identify key terminology and associated definitions related to cloud technology. Be able to establish a common terminology for use within your team or workgroup.
• Build a business case for cloud adoption and be able to determine with business units the benefits of the cloud and cloud migration strategies.

Prerequisites

To obtain the CCSP certification course, you must have:

• At least five years of working experience in IT, including three years of information security and one year of cloud security experience
• Those without the required experience can take the exam to become an Associate of (ISC)² while working toward the experience needed for full certification