Certified Cloud Security Professional (CCSP) IMF Academy

Overview

Many companies have concerns about adopting Cloud architecture due to the inherent security risks. This new training and certification - developed by the leading information security organization (ISC)2 in cooperation with the Cloud Security Alliance (CSA) - will prove your Cloud Security expertise at a global level.

Learning objectives of the CCSP training

After completing the IMF Academy Certified Cloud Security Professional (CCSP) training, you will be able to:

• Describe the building blocks necessary to develop cloud based systems, including concepts with regard to customer, provider, partner, measured services, scalability, virtualization, storage, and networking. You will also be able to understand the Cloud reference architecture based on activities defined by including standard documents.
• Identify the types of controls necessary to administer various levels of confidentiality, integrity and availability, with regard to securing data in the cloud. You will gain knowledge on topics of data discovery and classification techniques, digital risk management, privacy of data, data retention, detection, archiving, data event logging, chain of custody and non-repudiation, and the strategic use of Security Information and Event Management (SIEM).
• Identify the virtual and physical components of the cloud infrastructure with regard to risk management analysis, including tools and techniques necessary for maintaining a secure cloud infrastructure. In addition to risk analysis, you will gain an understanding in how to prepare and maintain business continuity and disaster recovery plans, including techniques and concepts for identifying critical systems and lost data recovery.
• Demonstrate an understanding of the software development lifecycle. You will gain an understanding in cloud software assurance and validation, utilizing secure software, and the controls necessary for developing secure cloud environments with regard to program interfaces, cloud application architecture, and how to ensure data and application integrity, confidentiality, and availability through identity and access management solutions.
• Demonstrate an ability to develop, plan, implement, run and manage the physical and logical cloud infrastructure through an understanding of the necessary controls and resources, best practices in monitoring and auditing, and the importance of risk assessment in both the physical and logical cloud infrastructures.
• Identify privacy issues and audit processes utilized within a cloud environment, including auditing controls, assurance issues, and the specific reporting attributes. Topics covered include ethical behaviour and required compliance within regulatory frameworks, which includes investigative techniques for crime analysis and evidence gathering methods.