Certified Cloud Security Professional

Earning the globally recognized CCSP security certification is a proven way to build your career and better secure critical assets in the cloud. The CCSP shows you have the advanced technical skills and knowledge to design, manage, and secure data, applications, and infrastructure in the cloud using best practices, policies, and procedures established by the cybersecurity experts at ISC.

Cloud Data Security

• Cloud Data Lifecycle

• Design and Implement Cloud Data Storage Architectures

• Design and Apply Data Security strategies, and Implement Data Discovery and Classification Technologies

• Design and Implement Data Rights Management

• Design and Implement Relevant Jurisdictional Data Protections for Personally Identifiable Information (PIN)

• Plan and Implement Data Retention, Deletion, and Archiving Policies

• Design and Implement Auditability, Traceability, and Accountability of Data Events

Architecture Concepts and Design Requirements

• Cloud Computing Concepts

• Cloud Reference Architecture

• Security Concepts Relevant to Cloud Computing

• Design Principles of Secure Cloud Computing

• Trusted Cloud Services

Cloud Platform and Infrastructure Security

• Sniffing

• Social Engineering

• Denial-of-Service

• Session Hijacking

• Evading IDS

• Firewalls and Honeypots

• Hacking Web Servers

Cloud Application Security

• Need for Training and Awareness in Application Security

• Cloud Software Assurance and Validation

• Use verified, Secure Software

• Software Development Life-Cycle (SDLC) Process

• Apply the Software Development Life-Cycle

• Specifics of Cloud Application Architecture

• Design Appropriate Identity and Access Management (IAM) Solutions

Operations

• Support the Planning Process for the Data Center Design

• Implement and Build Physical Infrastructure for a cloud environment.

• Run Physical Infrastructure for a cloud environment.

• Manage Physical Infrastructure for Cloud Environment

• Build Logical Infrastructure for Cloud Environment

• Run Logical Infrastructure for Cloud Environment

• Manage Logical Infrastructure for Cloud Environment

• Ensure Compliance with Regulations and Controls (ITIL, ISO/IEC 20000-I)

• Conduct a risk assessment Logical and Physical Infrastructure

• Collection, Acquisition, and Preservation of Digital Evidence

• Manage Communication with Relevant Parties

Legal and Compliance

• Legal Requirements and Unique Risks within the Cloud Environment

• Privacy Issues, Including Jurisdictional Variation

• Audit Process, Methodologies, and Required Adaptions for a Cloud Environment

• Implications of Cloud to Enterprise Risk Management

• Outsourcing and Cloud Contract Design

• Execute Vendor Management