Certificate of Cloud Security Knowledge (CCSK) Foundation (CSA authorized) Training Course

Module 1. Cloud Architecture

This module introduces the core principles of cloud computing, encompassing definitions, architectural frameworks, and the pivotal role of virtualization. Key subjects include cloud computing service models, deployment models, and essential characteristics. It also elucidates the Shared Responsibility Model and provides a structured approach to cloud security.

Topics Covered:

• Unit 1 - Introduction to Cloud Computing
• Unit 2 - Introduction & Cloud Architecture
• Unit 3 - Cloud Essential Characteristics
• Unit 4 - Cloud Service Models
• Unit 5 - Cloud Deployment Models
• Unit 6 - Shared Responsibilities

Module 2. Infrastructure Security for Cloud

Delving into the intricacies of safeguarding core cloud infrastructure, this module addresses cloud components, networks, management interfaces, and administrator credentials. It further explores virtual networking and workload security, covering the fundamentals of containers and serverless architectures.

Topics Covered:

• Unit 1 - Module Intro
• Unit 2 - Intro to Infrastructure Security for Cloud Computing
• Unit 3 - Software Defined Networks
• Unit 4 - Cloud Network Security
• Unit 5 - Securing Compute Workloads
• Unit 6 - Management Plane Security
• Unit 7 - BCDR

Module 3. Managing Cloud Security and Risk

This module highlights critical aspects of managing security within cloud environments. It commences with risk assessment and governance, then addresses legal and compliance challenges, such as discovery requirements in the cloud. Additionally, it covers essential CSA risk management tools, including the CAIQ, CCM, and STAR registry.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Governance
• Unit 3 - Managing Cloud Security Risk
• Unit 4 - Legal
• Unit 5 - Legal Issues In Cloud
• Unit 6 - Compliance
• Unit 7 - Audit
• Unit 8 - CSA Tools

Module 4. Data Security for Cloud Computing

Focusing on information lifecycle management in the cloud, this module explains how to implement security controls, with a particular emphasis on public cloud environments. Topics include the Data Security Lifecycle, cloud storage models, data security considerations across various delivery models, and managing encryption within and for the cloud, including customer-managed keys (BYOK).

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Cloud Data Storage
• Unit 3 - Securing Data In The Cloud
• Unit 4 - Encryption For IaaS
• Unit 5 - Encryption For PaaS & SaaS
• Unit 6 - Encryption Key Management
• Unit 7 - Other Data Security Options
• Unit 8 - Data Security Lifecycle

Module 5. Application Security and Identity Management for Cloud Computing

This module addresses identity management and application security for cloud deployments. Key subjects include federated identity, various IAM applications, secure development practices, and managing application security within and for the cloud.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Secure Software Development Life Cycle (SSDLC)
• Unit 3 - Testing & Assessment
• Unit 4 - DevOps
• Unit 5 - Secure Operations
• Unit 6 - Identity & Access Management Definitions
• Unit 7 - IAM Standards
• Unit 8 - IAM In Practice

Module 6. Cloud Security Operations

Discusses key considerations when evaluating, selecting, and managing cloud computing providers. It also examines the role of Security as a Service (SECaaS) providers and the impact of cloud technologies on Incident Response.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Selecting A Cloud Provider
• Unit 3 - SECaaS Fundamentals
• Unit 4 - SECaaS Categories
• Unit 5 - Incident Response
• Unit 6 - Domain 14 Considerations
• Unit 7 - CCSK Exam Preparation