CCSP (Certified Cloud Security Professional)

Earning the globally recognized CCSP cloud security certification is a proven way to build your career and better secure critical assets in the cloud.

The CCSP shows you have the advanced technical skills and knowledge to design, manage and secure data, applications and infrastructure in the cloud using best practices, policies and procedures established by the cybersecurity experts at (ISC).

Prove your skills, advance your career, and gain support from a community of cybersecurity leaders here to help you throughout your professional journey.

Audience Profile:

• The CCSP is ideal for IT and information security leaders responsible for applying best practices to cloud security architecture, design, operations and service orchestration, including those in the following positions:
• Enterprise Architect
• Security Administrator
• Systems Engineer
• Security Architect
• Security Consultant
• Security Engineer
• Security Manager
• Systems Architect

At Course Completion:

• You will know the -
• Have the required knowledge, skills, and abilities in cloud security design, implementation, architecture, operations, controls, and compliance with regulatory frameworks
• A CCSP applies information security expertise to a cloud computing environment
• Demonstrate competence in cloud security architecture, design, operations, and service orchestration

Modules:

• Module 1: Cloud Concepts, Architecture and Design
• Understand Cloud Computing Concepts
• Describe Cloud Reference Architecture
• Understand Security Concepts Relevant to Cloud Computing
• Understand Design Principles of Secure Cloud Computing
• Evaluate Cloud Service Providers
• Module 2: Cloud Data Security
• Describe Cloud Data Concepts
• Design and Implement Cloud Data Storage Architectures
• Design and Apply Data Security Technologies and Strategies
• Implement Data Discovery
• Implement Data Classification
• Design and Implement Information Rights Management (IRM)
• Plan and Implement Data Retention, Deletion and Archiving Policies
• Module 3: Cloud Platform & Infrastructure Security
• Comprehend Cloud Infrastructure Components
• Design a Secure Data Center
• Analyze Risks Associated with Cloud Infrastructure
• Design and Plan Security Controls
• Plan Disaster Recovery (DR) and Business Continuity (BC)
• Module 4: Cloud Application Security
• Advocate Training and Awareness for Application Security
• Describe the Secure Software Development Life Cycle (SDLC) Process
• Apply the Secure Software Development Life Cycle (SDLC)
• Apply Cloud Software Assurance and Validation
• Use Verified Secure Software
• Comprehend the Specifics of Cloud Application Architecture
• Design Appropriate Identity and Access Management (IAM) Solutions
• Module 5: Cloud Security Operations
• Implement and Build Physical and Logical Infrastructure for Cloud Environment
• Operate Physical and Logical Infrastructure for Cloud Environment
• Manage Physical and Logical Infrastructure for Cloud Environment
• Implement Operational Controls and Standards (e.g. ITIL, ISO/IEC 20000-1)
• Support Digital Forensics
• Manage Communication with Relevant Parties
• Module 6: Legal, Risk and Compliance
• Articulate Legal Requirements and Unique Risks within the Cloud Environment
• Understand Privacy Issues
• Understand Audit Process, Methodologies, and Required Adaptations for a Cloud Environment
• Understand Implications of Cloud to Enterprise Risk Management

Prerequisites:

• Candidates must have a minimum of 5 years cumulative paid work experience in information technology, of which 3 years must be in information security and 1 year in 1 or more of the 6 domains of the CCSP CBK.
• Earning CSA’s CCSK certificate can be substituted for 1 year of experience in 1 or more of the 6 domains of the CCSP CBK.
• Earning (ISC)²’s CISSP credential can be substituted for the entire CCSP experience requirement.