Certified Cloud Security Professional (CCSP) video

Introduction
Certified Cloud Security Professional (CCSP) Introduction

Lesson 1 Concepts and Architectures of Cloud Computing
Learning objectives
Key Cloud Computing Definitions
Roles and Responsibilities in Cloud Computing
Core Cloud Computing Characteristics
Cloud Building Block Technologies
Cloud Computing Activities and Capabilities
Categories of Cloud Services
Cloud Deployment Models
Shared Considerations for the Cloud
Impact of Cloud and Related Technologies

Lesson 2 Cloud Security Concepts and Design Principles
Learning objectives
Cryptography and Key Management
Identity and Access Control
Network and Virtualization Security
Common Cloud Threats
Cloud Security Hygiene
Cloud Business Continuity and Disaster Recovery
Functional Security Requirements in the Cloud
Security Considerations for Cloud Service Types
Cloud Design Patterns
DevOps Security

Lesson 3 The Cloud Data Lifecycle
Learning objectives
Phase 1 Create
Phase 2 Store
Phase 3 Use
Phase 4 Share
Phase 5 Archive
Phase 6 Destroy
Cloud Data Flows

Lesson 4 Cloud Data Security
Learning objectives
Concepts of Cloud Data Security
Data Obfuscation
Information Rights Management
Keys, Secrets, and Certificate Management
Data Discovery
Data Classification and Policy
Auditability, Traceability, and Accountability
Module introduction

Lesson 5 Cloud Infrastructure and Platform Components
Learning objectives
Physical Cloud Environments
Network Cloud Environments
Cloud Communications
Core Cloud Compute Resources
Cloud Virtualization Resources
Core Cloud Storage Components
Management Plane Cloud Solutions

Lesson 6 Data Center Design and Risk Analysis
Learning objectives
Secure Data Center Logical Design
Physical Data Center Design
Data Center Environmental Design
Design Resilient Environments
Cloud Infrastructure Risk Assessment
Cloud Vulnerabilities, Threats, and Attacks
Cloud Infrastructure Risk Mitigation Strategies

Lesson 7 Cloud Business Continuity Planning
Learning objectives
Business Continuity Planning
Business Impact Analysis
Backup and Restore Policies
Disaster Recovery Planning
Disaster Recovery Plan Testing Strategies

Lesson 8 Application Security Awareness and Life Cycles
Learning objectives
Cloud Application Architecture Elements
Cloud Development
SDLC Business Requirements and Phases
Common Software Vulnerabilities
Software Threat Modeling Methods
Secure Coding Methodologies
Software Configuration Management and Versioning

Lesson 9 Software Assurance and Validation
Learning objectives
Functional vs. Non-functional Testing
Security Testing Methodologies
Abuse Case Testing
OWASP API Security
Supply Chain Management
Third-party Software Management

Lesson 10 Identity and Access Management Solutions
Learning objectives
Cloud IAM Services
Federated Identity
Identity Providers
Single Sign-on
Multi-factor Authentication
Cloud Access Security Brokers
Managed Security Service Providers

Lesson 11 Build and Implement a Physical and Logical Cloud Infrastructure
Learning objectives
Hardware-specific Security Configuration
Installation and Configuration of Management Tools
SDS and Securing Storage Area Networks
Installation of Guest OS Virtualization Tools
Secure Network Configuration
Network Security Controls
Operating System Hardening
Patch Management and Infrastructure as Code (IaC)
Clustered Host Availability
Performance and Capacity Monitoring

Lesson 12 Operational Controls and Standards
Learning objectives
Configuration and Change Management
Continuity Management
Information Security Management
Service Level Management
Incident and Problem Management
Release and Deployment Management
Availability Management
Capacity Management
Security Operations Centers (SOC)
Intelligent Security Control Monitoring
Vulnerability Assessment

Lesson 13 Legal Requirements, Privacy Issues, and Risk Management in the Cloud
Learning objectives
Conflicting International Legislation
eDiscovery and Forensics
Issues with PHI and PII in the Cloud
Standard Privacy Requirements
Privacy Impact Assessments (PIAs)
Risk Treatment
Provider Risk Assessment Programs
Regulatory Transparency Requirements

Lesson 14 Cloud Audits, Methodologies, and Contracts
Learning objectives
Audit Controls, Reports, and Their Impact
Gap Analysis and Internal InfoSec Management Systems
Policies and Stakeholder Involvement
Specialized Compliance Requirements
The Impact of Distributed IT
Business Agreement Requirements
Supply Chain Management

Module 1 Cloud Concepts, Architecture, and Design
Module introduction

Module 2 Cloud Data Security
Module introduction

Module 4 Cloud Application Security
Module introduction

Module 5 Cloud Security Operations
Module introduction

Module 6 Legal, Risk, and Compliance
Module introduction

Summary
Certified Cloud Security Professional (CCSP) Summary