CCSP – ISC2 Certified Cloud Security Professional
Description
Leaders in Cybersecurity Training and Skills Certified Cloud Security Professional (CCSP) atteste des compétences techniques avancées pour concevoir, gérer et sécuriser les données, les applications et l’infrastructure dans le cloud, en appliquant les bonnes pratiques, politiques et procédures établies par les experts en cybersécurité d’ISC2.
Cette formation officielle ISC2 couvre l’intégralité des six domaines du CCSP Common Body of Knowledge (CBK) et prépare les participants à l’examen de certification. Les supports pédagogiques officiels sont développés par ISC2, créateur du CCSP CBK.
Target group
Le CCSP est idéal pour les professionnels de l’IT, du cyber, de l’information et de la sécurité logicielle responsables de l’application des bonnes pratiques à l’architecture, la conception, les opérations et l’orchestration des services de sécurité cloud, notamment aux postes suivants :
- Cloud Architect
- Cloud Engineer
- Cloud Consultant
- Cloud Administrator
- Cloud Security Analyst
- Cloud Specialist
- Auditor of Cloud Computing Services
- Professional Cloud Developer
Program
- Duration : 5 days
Jour 1 : Domain 1 : Concepts d’architecture et exigences de conception cloud
- Cloud models: private, public, hybrid, community.
- Service models: IaaS, PaaS, SaaS.
- Principle of shared responsibility.
- The security impact of cloud models.
- Concepts of resilience, availability and performance.
- Thematic quiz and case study on designing a secure architecture.
Jour 2 : Domain 2 : Sécurité des données dans le cloud
- Classification, lifecycle and location of data.
- Encryption, key management, HSM.
- Access control and identity management.
- Masking, tokenisation, anonymisation.
- Integrity, confidentiality, availability.
- Workshop: multi-cloud encryption strategy + quiz.
Jour 3 : Domain 3 : Sécurité des plateformes et infrastructures cloud
- Virtualised infrastructure components (VMs, containers, etc.).
- Network security in the cloud (SDN, VPC, micro-segmentation).
- Vulnerability and patch management.
- Zero Trust architecture in a cloud context.
- Case study: a hypervisor flaw in an IaaS architecture.
Jour 4 : Domain 4 : Sécurité des applications cloud
- Secure development: DevSecOps, CI/CD, SDLC.
- API management, code integrity, dynamic/statistical tests.
- Authenticity of packages, security of third-party libraries.
- Implementation of safety rules right from the design stage (Shift left).
- Workshop: securing a CI/CD chain with SAST/DAST.
Jour 5 : Domain 5 : Opérations + Module 6 : Aspects juridiques et conformité
Module 5 - Cloud operations security :
- Business continuity and disaster recovery (BCP/DRP).
- Monitoring, logging, SIEM.
- Incident management, orchestration and response.
- Automated controls.
- Case study: responding to a multi-tenant cloud incident.
Module 6 - Legal, compliance and audit :
- Regulatory frameworks: RGPD, ISO 27001, NIST, CSA CCM.
- Contractual cloud clauses, due diligence.
- Jurisdiction, data sovereignty, eDiscovery.
- Supplier and customer responsibilities.
- Final quiz + marked mock exam.
End of course
- Group debrief.
- Personalised revision plan.
- Informations pratiques pour passer l’examen (ISC2 – PearsonVue).
Goal
- Se préparer efficacement à l’examen Certified Cloud Security Professional (CCSP) de l’ISC2.
- Mastering best practice in cloud security on an international scale.
- Acquire cross-disciplinary expertise in the architectures, data, platforms and legal aspects of the cloud.
- Validate what you have learnt through practical exercises and quizzes based on the official exam.
Recommended
- Language : English
- Level : Advanced
- Certification body : ISC2
- Certification: Yes
- Accessibility : Yes
- Duration: 5 days
Important information:
Our courses are not registered with the Répertoire National des Certifications Professionnelles (RNCP), but they do comply with the requirements of the Répertoire Spécifique (RS).