CCSP – ISC2 Certified Cloud Security Professional
Description
The Certified Cloud Security Professional (CCSP) certification attests to advanced technical skills to design, manage and secure data, applications and infrastructure in the cloud, by applying best practices, policies and procedures established by leading ISC2 cybersecurity experts.
This official ISC2 training course covers all six domains of the CCSP Common Body of Knowledge (CBK), and prepares participants for the certification exam. The official learning materials are developed by ISC2, the creator of the CCSP CBK.
Target group
The CCSP is ideal for IT, cybersecurity, information security, and software security professionals responsible for applying best practices to the architecture, design, operation, and orchestration of cloud security services, particularly in the following roles:
- Cloud Architect
- Cloud Engineer
- Cloud Consultant
- Cloud Administrator
- Cloud Security Analyst
- Cloud Specialist
- Auditor of Cloud Computing Services
- Professional Cloud Developer
Program
- Duration : 5 days
Day 1: Domain 1. Cloud Concepts, Architecture and Design
- Cloud models: private, public, hybrid, community.
- Service models: IaaS, PaaS, SaaS.
- Principle of shared responsibility.
- The security impact of cloud models.
- Concepts of resilience, availability and performance.
- Thematic quiz and case study on designing a secure architecture.
Day 2: Domain 2. Cloud Data Security
- Classification, lifecycle and location of data.
- Encryption, key management, HSM.
- Access control and identity management.
- Masking, tokenisation, anonymisation.
- Integrity, confidentiality, availability.
- Workshop: multi-cloud encryption strategy + quiz.
Day 3: Domain 3. Cloud Platform and Infrastructure Security
- Virtualised infrastructure components (VMs, containers, etc.).
- Network security in the cloud (SDN, VPC, micro-segmentation).
- Vulnerability and patch management.
- Zero Trust architecture in a cloud context.
- Case study: a hypervisor flaw in an IaaS architecture.
Day 4: Domain 4. Cloud Application Security
- Secure development: DevSecOps, CI/CD, SDLC.
- API management, code integrity, dynamic/statistical tests.
- Authenticity of packages, security of third-party libraries.
- Implementation of safety rules right from the design stage (Shift left).
- Workshop: securing a CI/CD chain with SAST/DAST.
Day 5: Domain 5. Cloud Security Operations + Module 6: Legal, Risk and Compliance
Module 5 - Cloud operations security :
- Business continuity and disaster recovery (BCP/DRP).
- Monitoring, logging, SIEM.
- Incident management, orchestration and response.
- Automated controls.
- Case study: responding to a multi-tenant cloud incident.
Module 6 - Legal, compliance and audit :
- Regulatory frameworks: RGPD, ISO 27001, NIST, CSA CCM.
- Contractual cloud clauses, due diligence.
- Jurisdiction, data sovereignty, eDiscovery.
- Supplier and customer responsibilities.
- Final quiz + marked mock exam.
End of course
- Group debrief.
- Personalised revision plan.
- Informations pratiques pour passer l’examen (ISC2 – PearsonVue).
Goal
- Effectively prepare for the ISC2 Certified Cloud Security Professional (CCSP) exam.
- Mastering best practice in cloud security on an international scale.
- Acquire cross-disciplinary expertise in the architectures, data, platforms and legal aspects of the cloud.
- Validate what you have learnt through practical exercises and quizzes based on the official exam.
Recommended
- Language : English
- Level : Advanced
- Certification body : ISC2
- Certification: Yes
- Accessibility : Yes
- Duration: 5 days
Important information:
Our courses are not registered with the Répertoire National des Certifications Professionnelles (RNCP), but they do comply with the requirements of the Répertoire Spécifique (RS).