Certificate of Cloud Security Knowledge (CCSK) Foundation (CSA authorized) Training Course

Module 1. Cloud Architecture

This module explores the foundations of cloud computing, covering essential definitions, architectures, and the critical role of virtualization. It examines cloud computing service and delivery models along with fundamental characteristics, while introducing the Shared Responsibilities Model and a structured framework for approaching cloud security.

Key Topics:

• Unit 1 - Introduction to Cloud Computing
• Unit 2 - Introduction & Cloud Architecture
• Unit 3 - Cloud Essential Characteristics
• Unit 4 - Cloud Service Models
• Unit 5 - Cloud Deployment Models
• Unit 6 - Shared Responsibilities

Module 2. Infrastructure Security for Cloud

This section focuses on securing core cloud infrastructure components, including networks, management interfaces, and administrator credentials. It provides an in-depth look at virtual networking and workload security, addressing the basics of containers and serverless technologies.

Key Topics:

• Unit 1 - Module Intro
• Unit 2 - Intro to Infrastructure Security for Cloud Computing
• Unit 3 - Software Defined Networks
• Unit 4 - Cloud Network Security
• Unit 5 - Securing Compute Workloads
• Unit 6 - Management Plane Security
• Unit 7 - BCDR

Module 3. Managing Cloud Security and Risk

This module addresses critical aspects of security management in cloud environments. It starts with risk assessment and governance, extending to legal and compliance matters, such as discovery requirements in the cloud. It also highlights key CSA risk management tools, including the CAIQ, CCM, and the STAR registry.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Governance
• Unit 3 - Managing Cloud Security Risk
• Unit 4 - Legal
• Unit 5 - Legal Issues In Cloud
• Unit 6 - Compliance
• Unit 7 - Audit
• Unit 8 - CSA Tools

Module 4. Data Security for Cloud Computing

Focusing on information lifecycle management, this module details the application of security controls, with a specific emphasis on public cloud environments. Topics include the Data Security Lifecycle, cloud storage models, security challenges across different delivery models, and the management of encryption within and for the cloud, including customer-managed keys (BYOK).

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Cloud Data Storage
• Unit 3 - Securing Data In The Cloud
• Unit 4 - Encryption For IaaS
• Unit 5 - Encryption For PaaS & SaaS
• Unit 6 - Encryption Key Management
• Unit 7 - Other Data Security Options
• Unit 8 - Data Security Lifecycle

Module 5. Application Security and Identity Management for Cloud Computing

This module covers identity management and application security tailored for cloud deployments. It examines federated identity, various IAM applications, secure development practices, and strategies for managing application security both in and for the cloud.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Secure Software Development Life Cycle (SSDLC)
• Unit 3 - Testing & Assessment
• Unit 4 - DevOps
• Unit 5 - Secure Operations
• Unit 6 - Identity & Access Management Definitions
• Unit 7 - IAM Standards
• Unit 8 - IAM In Practice

Module 6. Cloud Security Operations

This final module outlines key considerations for evaluating, selecting, and managing cloud computing providers. It also discusses the role of Security as a Service (SECaaS) providers and the implications of cloud adoption on Incident Response procedures.

Key Topics:

• Unit 1 - Module Introduction
• Unit 2 - Selecting A Cloud Provider
• Unit 3 - SECaaS Fundamentals
• Unit 4 - SECaaS Categories
• Unit 5 - Incident Response
• Unit 6 - Domain 14 Considerations
• Unit 7 - CCSK Exam Preparation