• Domain 1: Cloud Concepts, Architecture, and Design (17%)
  • Understand cloud computing concepts
  • Describe cloud reference architecture
  • Understand security concepts relevant to cloud computing
  • Understand design principles of secure cloud computing
  • Evaluate cloud service providers
• Domain 2: Cloud Data Security (20%)
  • Describe cloud data concepts
  • Design and implement cloud data storage architectures
  • Design and apply data security technologies and strategies
  • Implement data discovery
  • Plan and implement data classification
  • Design and implement Information Rights Management (IRM)
  • Plan and implement data retention, deletion and archiving policies
  • Design and implement auditability, traceability and accountability of data events
• Domain 3: Cloud Platform & Infrastructure Security (17%)
  • Comprehend cloud infrastructure and platform components
  • Design a secure data center
  • Analyze risks associated with cloud infrastructure and platforms
  • Plan and implementation of security controls
  • Plan business continuity (BC) and disaster recovery (DR)
• Domain 4: Cloud Application Security (17%)
  • Advocate training and awareness for application security
  • Describe the Secure Software Development Life Cycle (SDLC) process
  • Apply the Secure Software Development Life Cycle (SDLC)
  • Apply cloud software assurance and validation
  • Use verified secure software
  • Comprehend the specifics of cloud application architecture
  • Design appropriate Identity and Access Management (IAM) solutions
• Domain 5: Cloud Security Operations (16%)
  • Build and implement physical and logical infrastructure for cloud environment
  • Operate and maintain physical and logical infrastructure for cloud environment
  • Implement operational controls and standards (e.g., Information Technology Infrastructure Library (ITIL), International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 20000-1)
  • Support digital forensics
  • Manage communication with relevant parties
  • Manage security operations
• Domain 6: Legal, Risk and Compliance (13%)
  • Articulate legal requirements and unique risks within the cloud environment
  • Understand privacy issues
  • Understand audit process, methodologies, and required adaptations for a cloud environment
  • Understand implications of cloud to enterprise risk management
  • Understand outsourcing and cloud contract design

This CCSP training is suitable for experienced IT personnel who are involved with:

• Information Security
• Cloud Architecture
• Risk and Compliance
• Security Engineering
• Governance
• IT auditing & assessment

The candidates who are enrolling for this course must have five years of working experience in information security and CCSP CBK domains. All those who fail to fulfill the eligibility criteria can take the exam to become an associate of (ISC)2 and can start working towards getting the experience to get the desired certification.

Note:

• CCSP® is a registered mark of The International Information Systems Security Certification Consortium ((ISC)2).
• We are not an authorized training partner of (ISC)2.

• Design and implement security controls for cloud infrastructure, applications, and data.
• Secure cloud-based applications, including software as a service (SaaS) and platform as a service (PaaS).
• Understand the legal and compliance aspects of cloud security, including privacy and audit requirements.
• Implement and manage security operations in the cloud, including monitoring, incident response, and disaster recovery.
• Understand the unique security challenges and considerations in cloud environments.
• Apply best practices for securing cloud services, data, and infrastructure.