Certified Cloud Security Professional (CCSP)

GLOBAL CLOUD SECURITY PROFESSIONAL (CCSP) – TRAINING PROGRAMME

DOMAIN I
Architectural Concepts and Design Requirements

• Understand Cloud Computing concepts
• Describe Cloud reference architecture
• Understand Security concepts relevant to Cloud Computing
• Understand Design principles of Secure Cloud Computing
• Indentify trusted Cloud services

DOMAIN II
Cloud Data Security

• Understand Cloud Data lifecycle
• Design and implement Cloud Data Storage architectures
• Understand and implement Data Discovery and classification technologies
• Design and implement relevant jurisdictional Data Protection for Personally Identifiable Information (PII)
• Design and implement Data Risk Management
• Plan and implement Data retention, detection and archival policies
• Design and implement auditability, traceability, and accountability of data events

DOMAIN III
Cloud Platform and Infrastructure Security

• Comprehend Cloud Infrastructure
• Analyze risks associated to Cloud Infrastructure
• Design and plan security controls
• Plan Disaster Recovery & Business Continuity Management (BCM)

DOMAIN IV
Cloud Application Security

• Recognize the need for training and awareness in Application Security
• Understand Cloud Software assurance and validation
• Use verified secure software
• Comprehend the Software Development Lifecycle (SDLC) process
• Apply the secure software development lifecycle
• Comprehend the specifics of Cloud Application Architecture
• Design appropriate Identity & Access Management (IAM) solutions

DOMAIN V
Operations

• Support the planning process for the data center design
• Implement and build physical infrastructure for Cloud environment
• Run physical infrastructure for Cloud environment
• Manage physical infrastructure for Cloud environment
• Build logical infrastructure for Cloud environment
• Run logical infrastructure for Cloud environment
• Manage logical infrastructure for Cloud environment
• Ensure compliance with regulations and controls
• Conduct risk assessment to logical and physical infrastructure
• Understand the collection and preservation of digital evidence
• Manage communications with relevant parties domain

DOMAIN VI
Legal and Compliance

• Understand legal requirements and unique risks within the Cloud environment
• Understand privacy issues, including jurisdictional variencies
• Understanding audit process, methodologies, and required adaptions for a Cloud environment
• Understand implications of Cloud to Enterprise Risk Management (ERM)
• Understand Outsourcing and Cloud Contract Design
• Execute Vendor Management