Certificate of Cloud Security Knowledge (CCSK) Foundation (CSA authorized) Training Course

Module 1. Cloud Architecture

This module establishes the foundations of cloud computing, covering definitions, architectural frameworks, and the significance of virtualization. It examines cloud computing service models, delivery mechanisms, and essential characteristics, while introducing the Shared Responsibilities Model and a structured framework for approaching cloud security.

Key Topics:

• Unit 1 - Introduction to Cloud Computing
• Unit 2 - Introduction & Cloud Architecture
• Unit 3 - Cloud Essential Characteristics
• Unit 4 - Cloud Service Models
• Unit 5 - Cloud Deployment Models
• Unit 6 - Shared Responsibilities

Module 2. Infrastructure Security for Cloud

This section explores the specifics of securing core cloud infrastructure, including components, networks, management interfaces, and administrator credentials. It also delves into virtual networking and workload security, covering fundamentals of containers and serverless environments.

Key Topics:

• Unit 1 - Module Intro
• Unit 2 - Intro to Infrastructure Security for Cloud Computing
• Unit 3 - Software Defined Networks
• Unit 4 - Cloud Network Security
• Unit 5 - Securing Compute Workloads
• Unit 6 - Management Plane Security
• Unit 7 - BCDR

Module 3. Managing Cloud Security and Risk

This module addresses critical aspects of managing cloud security, starting with risk assessment and governance. It covers legal and compliance matters, including discovery requirements in the cloud, and introduces key CSA risk tools such as the CAIQ, CCM, and STAR registry.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Governance
• Unit 3 - Managing Cloud Security Risk
• Unit 4 - Legal
• Unit 5 - Legal Issues In Cloud
• Unit 6 - Compliance
• Unit 7 - Audit
• Unit 8 - CSA Tools

Module 4. Data Security for Cloud Computing

Focusing on public cloud environments, this module covers information lifecycle management and the application of security controls. Topics include the Data Security Lifecycle, cloud storage models, data security challenges across various delivery models, and encryption management, including Bring Your Own Key (BYOK) strategies.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Cloud Data Storage
• Unit 3 - Securing Data In The Cloud
• Unit 4 - Encryption For IaaS
• Unit 5 - Encryption For PaaS & SaaS
• Unit 6 - Encryption Key Management
• Unit 7 - Other Data Security Options
• Unit 8 - Data Security Lifecycle

Module 5. Application Security and Identity Management for Cloud Computing

This module addresses identity management and application security within cloud deployments. It covers federated identity, various IAM applications, secure development practices, and strategies for managing application security in cloud contexts.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Secure Software Development Life Cycle (SSDLC)
• Unit 3 - Testing & Assessment
• Unit 4 - DevOps
• Unit 5 - Secure Operations
• Unit 6 - Identity & Access Management Definitions
• Unit 7 - IAM Standards
• Unit 8 - IAM In Practice

Module 6. Cloud Security Operations

This module highlights key considerations for evaluating, selecting, and managing cloud computing providers. It also discusses the role of Security as a Service (SECaaS) providers and the impact of cloud computing on Incident Response.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Selecting A Cloud Provider
• Unit 3 - SECaaS Fundamentals
• Unit 4 - SECaaS Categories
• Unit 5 - Incident Response
• Unit 6 - Domain 14 Considerations
• Unit 7 - CCSK Exam Preparation