Certificate of Cloud Security Knowledge (CCSK) Foundation (CSA authorized) Training Course

Module 1. Cloud Architecture

Establishes the basics of cloud computing, covering definitions, architectural models, and the role of virtualization. Key areas include cloud computing service models, delivery models, and essential characteristics. It also introduces the Shared Responsibilities Model and a structured framework for approaching cloud security.

Topics Covered:

• Unit 1 - Introduction to Cloud Computing
• Unit 2 - Introduction & Cloud Architecture
• Unit 3 - Cloud Essential Characteristics
• Unit 4 - Cloud Service Models
• Unit 5 - Cloud Deployment Models
• Unit 6 - Shared Responsibilities

Module 2. Infrastructure Security for Cloud

Explores the details of securing core cloud infrastructure, encompassing cloud components, networks, management interfaces, and administrator credentials. The module examines virtual networking and workload security, including the fundamentals of containers and serverless environments.

Topics Covered:

• Unit 1 - Module Intro
• Unit 2 - Intro to Infrastructure Security for Cloud Computing
• Unit 3 - Software Defined Networks
• Unit 4 - Cloud Network Security
• Unit 5 - Securing Compute Workloads
• Unit 6 - Management Plane Security
• Unit 7 - BCDR

Module 3. Managing Cloud Security and Risk

Addresses critical considerations for managing cloud security. It starts with risk assessment and governance, progressing to legal and compliance matters, such as discovery requirements in cloud environments. It also highlights key CSA risk tools, including the CAIQ, CCM, and STAR registry.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Governance
• Unit 3 - Managing Cloud Security Risk
• Unit 4 - Legal
• Unit 5 - Legal Issues In Cloud
• Unit 6 - Compliance
• Unit 7 - Audit
• Unit 8 - CSA Tools

Module 4. Data Security for Cloud Computing

Focuses on information lifecycle management in the cloud and the application of security controls, with a particular emphasis on public cloud environments. Topics include the Data Security Lifecycle, cloud storage models, security challenges across different delivery models, and encryption management for the cloud, including Bring Your Own Key (BYOK) strategies.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Cloud Data Storage
• Unit 3 - Securing Data In The Cloud
• Unit 4 - Encryption For IaaS
• Unit 5 - Encryption For PaaS & SaaS
• Unit 6 - Encryption Key Management
• Unit 7 - Other Data Security Options
• Unit 8 - Data Security Lifecycle

Module 5. Application Security and Identity Management for Cloud Computing

Covers identity management and application security within cloud deployments. Key topics include federated identity, various IAM applications, secure development practices, and the management of application security for cloud environments.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Secure Software Development Life Cycle (SSDLC)
• Unit 3 - Testing & Assessment
• Unit 4 - DevOps
• Unit 5 - Secure Operations
• Unit 6 - Identity & Access Management Definitions
• Unit 7 - IAM Standards
• Unit 8 - IAM In Practice

Module 6. Cloud Security Operations

Discusses key factors in evaluating, selecting, and managing cloud computing providers. It also examines the role of Security as a Service (SECaaS) providers and the impact of cloud computing on Incident Response.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Selecting A Cloud Provider
• Unit 3 - SECaaS Fundamentals
• Unit 4 - SECaaS Categories
• Unit 5 - Incident Response
• Unit 6 - Domain 14 Considerations
• Unit 7 - CCSK Exam Preparation