Course description
Cloud Computing Security Knowledge CCSK Online Course
The Cloud Computing Security Knowledge class provides students thorough coverage of cloud security fundamentals and prepares th to take the Cloud Security Alliance CCSK certification exam. The course begins with a detailed description of cloud computing and then expands into all major domains such as; Governance and Risk Managent, the Cloud Architectural Framework and Business Continuity/Disaster Recovery
Example Training Video
LEARN365 Courses Include 12 Months Unlimited Online Access to:
Expert Instructor-Led Training: Learn 365 uses only the industry's finest instructors in the IT industry. They have a minimum of 15 years real-world experience and are subject matter experts in their fields. Unlike a live class, you can fast-forward, repeat or rewind all your lectures. This creates a personal learning experience and gives you all the benefit of hands-on training with the flexibility of doing it around your schedule 24/7.
Visual Donstrations & Multimedia Presentations: Our courseware includes instructor-led donstrations and visual presentations that allow students to develop their skills based on real world scenarios explained by the instructor. Learn 365 always focuses on real world scenarios and skill-set development.
Quizzes & Exam Simulators: Learn 365's custom practice exams prepare you for your exams differently and more effectively than the traditional exam preps on the market. You will have practice quizzes after each module to ensure you are confident on the topic you have completed before proceeding. This will allow you to gauge your effectiveness before moving to the next module in your course. Learn 365 courses also include practice exams designed to replicate and mirror the environment in the testing center. These exams are on average 100 questions to ensure you are 100% prepared before taking your certification exam.
Social Learning & Networking: Learn 365 has designed a world class Learning Managent Syst (LMS). This syst allows you to interact and collaborate with other students and Learn 365 ployees, form study groups, engage in discussions in our NOW@ Forums, rate and like different courses and stay up to date with all the latest industry knowledge through our forums, student contributions and announcent features.
Flash Cards & Educational Games: IT online learning knows that education is not a one size fits all approach. Students learn in different ways through different tools. That is why we provide Flash Cards and Education Games throughout our courses. This will allow you to train in ways that keep you engaged and focused. Each course will have dozens of Flash Cards so you can sharpen your skill-sets throughout your training as well as educational games designed to make sure your retention level of the materials is extrely high.
Navigation and Controls: Learn 365's self-paced training programs are designed in a modular fashion to allow you the flexibility to work with expert level instruction anytime 24/7. All courses are arranged in defined sections with navigation controls allowing you to control the pace of your training. This allows students to learn at their own pace around their schedule.
Certificate of Completion: Upon completion of your training course, you will receive a Certificate of completion displaying your full name, course completed as well as the date of completion. You can print this out or save it digitally to showcase your accomplishment.
Upcoming start dates
Outcome / Qualification etc.
Upon completing this course, the students will be experts in the following topics:
- Pass the CCSK Exam
- Understanding cloud computing security challenges
- Cloud computing security controls recommendation
- Elasticity, Resiliency and Measured Usage
- Understand the cloud computing architectural framework
Training Course Content
Architecture
- NIST Definitions
- Essential Characteristics
- Service Models
- Deployment Models
- Multi-Tenancy
- CSA Cloud Reference Model
- Jericho Cloud Cube Model
- Cloud Security Reference Model
- Cloud Service Brokers
- Service Level Agreents
Governance and Enterprise Risk Managent
- Contractual Security Requirents
- Enterprise and Information Risk Managent
- Third Party Managent Recommendations
- Supply chain examination
- Use of Cost Savings for Cloud
Legal Issues: Contracts and Electronic Discovery
- Consideration of cloud-related issues in three dimensions
- eDiscovery considerations
- Jurisdictions and data locations
- Liability for activities of subcontractors
- Due diligence responsibility
- Federal Rules of Civil Procedure and electronically stored information
- Metadata
- Litigation hold
Compliance and Audit Managent
- Definition of Compliance
- Right to audit
- Compliance impact on cloud contracts
- Audit scope and compliance scope
- Compliance analysis requirents
- Auditor requirents
Information Managent and Data Security
- Six phases of the Data Security Lifecycle and their key elents
- Volume storage
- Object storage
- Logical vs physical locations of data
- Three valid options for protecting data
- Data Loss Prevention
- Course Syllabus
- Detection Data Migration to the Cloud
- Encryption in IaaS, PaaS & SaaS
- Database Activity Monitoring and File Activity Monitoring
- Data Backup
- Data Dispersion
- Data Fragmentation
Interoperability and Portability
- Definitions of Portability and Interoperability
- Virtualization impacts on Portability and Interoperability
- SAML and WS-Security
- Size of Data Sets
- Lock-In considerations by IaaS, PaaS & SaaS delivery models
- Mitigating hardware compatibility issues
Traditional Security, Business Continuity, and Disaster Recovery
- Four D's of perimeter security
- Cloud backup and disaster recovery services
- Customer due diligence related to BCM/DR
- Business Continuity Managent/Disaster Recovery due diligence
- Restoration Plan
- Physical location of cloud provider
Data Center Operations
- Relation to Cloud Controls Matrix
- Queries run by data center operators
- Technical aspects of a Provider's data center operations for customers
- Logging and report generation in multi-site clouds
Incident Response
- Factor allowing for more efficient and effective containment and recovery in a cloud
- Main data source for detection and analysis of an incident
- Investigating and containing an incident in an Infrastructure as a Service environment
- Reducing the occurrence of application level incidents
- How often should incident response testing occur
- Offline analysis of potential incidents
Application Security
- Identity, entitlent, and access managent (IdEA)
- SDLC impact and implications
- Differences in S-P-I models
- Consideration when performing a rote vulnerability test of a cloud-based application
- Categories of security monitoring for applications
- Entitlent matrix
Encryption and Key Managent
- Adequate encryption protection of data in the cloud
- Key managent best practices, location of keys, keys per user
- Relationship to tokenization, masking, anonymization and cloud database controls
Identity, Entitlent, and Access Managent
- Relationship between identities and attributes
- Identity Federation
- Relationship between Policy Decision Point (PDP) and Policy Enforcent Point (PEP)
- SAML and WS-Federation
- Provisioning and authoritative sources
Virtualization
- Security concerns for hypervisor architecture
- VM guest hardening, blind spots, VM Sprawl, data comingling, instant-on gaps
- In-Motion VM characteristics that can create a serious complexity for audits
- How can virtual machine communications bypass network security controls
- VM attack surfaces
- Compartmentalization of VMs
Security as a Service
- 10 categories
- Barriers to developing full confidence in security as a service (SECaaS)
- Deployment of Security as a Service in a regulated industry prior SLA
- Logging and reporting implications
- How can web security as a service be deployed
- What measures do Security as a Service providers take to earn the trust of their customers
- ENISA Cloud Computing: Benefits, Risks and Recommendations for Information Security
- Isolation failure
- Economic Denial of Service
- Licensing Risks
- VM hopping
- Five key legal issues common across all scenarios
- Top security risks in ENISA research
- OVF
- Underlying vulnerability in Loss of Governance
- User provisioning vulnerability
- Risk concerns of a cloud provider being acquired
- Security benefits of cloud
- Risks
- Data controller vs data processor definitions in Infrastructure as a Service (IaaS), who is responsible for guest systs monitor
Why choose Learning247
Gain a New Qualification - Get a verifiable qualification with Learning247 and improve your career prospects. Most of our courses CPD Accredited.
Wide Range of Courses - With over 800+ courses to choose from you're sure to find a course that interests you.
Study Anywhere & Any time - All of our online courses can be studied from your PC, MacBook , tablet or smart phone device.
Request info
Learning247
As one of the market-leaders in distance-learning and self-study multimedia-based training, Learning247 provides the most cost-effective route to enable you to update and improve upon your skills; and all without the massive prices that are regularly seen throughout the training...