Certified Cloud Security Officer (CCSO) – e-learning

• Module 1 – Introduction to Cloud Computing and Architecture
• Module 2 – Cloud Risks
• Module 3 – ERM and Governance
• Module 4 – Legal Issues
• Module 5 – Virtualization
• Module 6 – Data Security
• Module 7 – Data Center Operations
• Module 8 – Interoperability and Portability

• Module 9 – Traditional Security
• Module 10 – BCM and DR
• Module 11 – Incident Response
• Module 12 – Application Security
• Module 13 – Encryption and Key Management
• Module 14 – Identity, Entitlement and Access Management
• Module 15 – Auditing and Compliance

Bekijk meer onderwerpenBekijk minder onderwerpen

• Module 1 – Introduction to Cloud Computing and Architecture
  • Cloud Computing Terminology
  • Cloud Computing Definition
  • Cloud Computing Characteristics
  • Cloud Computing Benefits
  • Cost Benefit Analysis
  • Reference Model
  • What is Security for the Cloud?
• Module 2 – Cloud Risks
  • Cloud Migration Security Evaluation
  • ENISA Risk Evaluation
  • Cloud Controls Matrix
  • Relevant CCM Controls
• Module 3 – ERM and Governance
  • Application of Governance and Risk Management to the Cloud
  • Importance of the SLA
  • Relevant CCM controls
• Module 4 – Legal Issues
  • Understanding Unique Risks in the Cloud
  • International Law and Potential Conflicts
  • eDiscovery
  • Contract Considerations
  • Relevant CCM Controls
• Module 5 – Virtualization
  • Virtualization Principles
  • Key Components Mapped to Cloud Layer
  • Key Security Concerns
  • Other Technologies Used in the Cloud
  • The Layers
  • Relevant CCM Controls
• Module 6 – Data Security
  • Cloud Data Life Cycle
  • Design and Implement Cloud Data Storage
  • Architectures
  • Design and Apply Data Security Strategies
  • Understand and Implement Data Discovery and Classification Technologies
  • Design and Implement Relevant Jurisdictional Data Protection for PII
  • Design and Implement Data Rights Management
  • Plan and Implement Data Retention, Deletion and Archival Policies
  • Design and ImplementAuditability, Traceability, and Accountability of Data Events
  • Relevant CCM Controls
• Module 7 – Data Center Operations
  • Build Logical Infrastructure for Cloud Environment
  • Manage Logical Infrastructure for Cloud Environment
  • Manage Communications with Relevant Parties
  • Relevant CCM Controls
• Module 8 – Interoperability and Portability
  • Interoperability
  • Portability
  • Relevant CCM Controls

• Module 9 – Traditional Security
  • The Physical Environment
  • Support the Planning Process for the Data Center Design
  • Implement and Build Physical Infrastructure for Cloud Environment
  • Run Physical Infrastructure for Cloud Environment
  • Manage Physical Infrastructure for Cloud Environment
  • Relevant CCM Controls
• Module 10 – BCM and DR
  • Disaster Recovery and Business Continuity Management
  • Examples
  • Relevant CCM Controls
• Module 11 – Incident Response
  • Incident Response
  • Forensics
  • Relevant CCM Controls
• Module 12 – Application Security
  • Training and Awareness Secure Software Development Life Cycle Process
  • Application of the Secure Software Development Life Cycle
  • Verifying the use of Secure Software
  • Identity and Access Management (IAM) Solutions
  • Additional components for the Cloud
  • Software Assurance and Validation
  • Relevant CCM Controls
• Module 13 – Encryption and Key Management
  • Review from other chapters
  • Key Management in today’s cloud services
  • Recommendations
  • Relevant CCM Controls
• Module 14 – Identity, Entitlement and Access Management
  • Introduction to Identity and Access Management
  • Identities and Attributes
  • Architectures for Interfacing to Identity and Attribute Providers
  • The Identity
  • Recommendations
  • Relevant CCM Controls
• Module 15 – Auditing and Compliance
  • Compliance and Audit Cloud Issues
  • Assurance Frameworks
  • Auditing
  • CCM Relevant Controls