CCSP obuka za sertifikaciju

Plan obuke

Module 1: Cloud Concepts, Architecture, and Design

Understand Cloud Computing Concepts
Cloud Computing Definitions
Cloud Computing Roles and Responsibilities
Key Cloud Computing Characteristics
Building Block Technologies
Describe Cloud Reference Architecture
Cloud Computing Activities
Cloud Service Capabilities
Cloud Service Categories
Cloud Deployment Models
Cloud Shared Considerations
Impact of Related Technologies
Understand Security Concepts Relevant to Cloud
Computing
Cryptography and Key Management
Identity and Access Control
Data and Media Sanitization
Network Security
Virtualization Security
Common Threats
Security Hygiene
Understand Design Principles of Secure Cloud
Computing
Cloud Secure Data Lifecycle
Cloud-Based
Business Continuity and Disaster Recovery Plan
Business Impact Analysis
Functional Security Requirements
Security Considerations for Different Cloud
Categories
Cloud Design Patterns
DevOps Security
Evaluate Cloud Service Providers
Verification against Criteria
System/Subsystem Product Certifications

Module 2: Cloud Data Security

Describe Cloud Data Concepts
Cloud Data Lifecycle Phases
Data Dispersion
Data Flows
Design and Implement Cloud Data Storage
Architectures
Storage Types
Threats to Storage Types
Design and Apply Data Security Technologies and Strategies
Encryption and Key Management
Hashing
Data Obfuscation
Tokenization
Data Loss Prevention
Keys, Secrets, and Certificates Management
Implement Data Discovery
Structured Data
Unstructured Data
Semi-structured Data
Data Location
Implement Data Classification
Data Classification Policies
Mapping
Labeling
Design and Implement Information Rights Management
Objectives
Appropriate Tools
Plan and Implement Data Retention, Deletion, and Archiving Policies
Data Retention Policies
Data Deletion Procedures and Mechanisms
Data Archiving Procedures and Mechanisms
Legal Hold
Design and Implement Auditability, Traceability, and Accountability of Data Events
Definition of Event Sources and Requirement of Event Attribution
Logging, Storage, and Analysis of Data Events
Chain of Custody and Nonrepudiation

Module 3: Cloud Platform and Infrastructure Security

Comprehend Cloud Infrastructure and Platform Components
Physical Environment
Network and Communications
Compute
Virtualization
Storage
Management Plane
Design a Secure Data Center
Logical Design
Physical Design
Environmental Design
Analyze Risks Associated with Cloud Infrastructure and Platforms
Risk Assessment
Cloud Vulnerabilities, Threats, and Attacks
Risk Mitigation Strategies
Plan and Implementation of Security Controls
Physical and Environmental Protection
System, Storage, and Communication Protection
Identification, Authentication, and Authorization in Cloud Environments
Audit Mechanisms
Plan Disaster Recovery and Business Continuity
Business Continuity/Disaster Recovery Strategy
Business Requirements
Creation, Implementation, and Testing of Plan

Module 4: Cloud Application Security

Advocate Training and Awareness for Application Security
Cloud Development Basics
Common Pitfalls
Common Cloud Vulnerabilities
Describe the Secure Software Development Life Cycle Process
NIST Secure Software Development Framework
OWASP Software Assurance Maturity Model
Business Requirements
Phases and Methodologies
Apply the Secure Software Development Life Cycle
Cloud-Specific Risks
Threat Modeling
Avoid Common Vulnerabilities during Development Secure Coding
Software Configuration Management and Versioning
Apply Cloud Software Assurance and Validation
Functional and Non-functional Testing
Security Testing Methodologies
Quality Assurance
Abuse Case Testing
Use Verified Secure Software
Securing Application Programming Interfaces
Supply-Chain Management
Third-Party Software Management
Validated Open-Source Software
Comprehend the Specifics of Cloud Application Architecture
Supplemental Security Components
Cryptography
Sandboxing
Application Virtualization and Orchestration
Design Appropriate Identity and Access Management Solutions
Federated Identity
Identity Providers
Single Sign-on
Multifactor Authentication
Cloud Access Security Broker

Module 5: Cloud Security Operations

Build and Implement Physical and Logical Infrastructure for Cloud Environment
Hardware-Specific Security Configuration Requirements
Installation and Configuration of Virtualization Management Tools
Virtual Hardwareâ€“Specific Security Configuration Requirements
Installation of Guest Operating System Virtualization Toolsets
Operate Physical and Logical Infrastructure for Cloud Environment
Configure Access Control for Local and Remote Access
Secure Network Configuration
Operating System Hardening through the Application of Baselines
Availability of Stand-Alone Hosts
Availability of Clustered Hosts
Availability of Guest Operating Systems
Manage Physical and Logical Infrastructure for Cloud Environment
Access Controls for Remote Access
Operating System Baseline Compliance Monitoring and Remediation
Patch Management
Performance and Capacity Monitoring
Hardware Monitoring
Configuration of Host and Guest Operating System Backup and Restore Functions
Network Security Controls
Management Plane
Implement Operational Controls and Standards
Change Management
Continuity Management
Information Security Management
Continual Service Improvement Management
Incident Management
Problem Management
Release Management
Deployment Management
Configuration Management
Service Level Management
Availability Management
Capacity Management
Support Digital Forensics
Forensic Data Collection Methodologies
Evidence Management
Collect, Acquire, and Preserve Digital Evidence
Manage Communication with Relevant Parties
Vendors
Customers
Partners
Regulators
Other Stakeholders
Manage Security Operations
Security Operations Center
Monitoring of Security Controls
Log Capture and Analysis
Incident Management

Module 6: Legal, Risk, and Compliance

Business Requirements
Vendor ManArticulating Legal Requirements and Unique
Risks within the Cloud Environment
Conflicting International Legislation
Evaluation of Legal Risks Specific to Cloud Computing
Legal Frameworks and Guidelines
eDiscovery
Forensics Requirements
Understand Privacy Issues
Difference between Contractual and Regulated Private Data
Country-Specific Legislation Related to Private Data
Jurisdictional Differences in Data Privacy
Standard Privacy Requirements
Privacy Impact Assessments
Understanding Audit Process, Methodologies, and Required
Adaptations for a Cloud Environment
Internal and External Audit Controls
Impact of Audit Requirements
Identify Assurance Challenges of Virtualization and Cloud
Types of Audit Reports
Restrictions of Audit Scope Statements
Gap Analysis
Audit Planning
Internal Information Security Management System
Internal Information Security Controls System
Policies
Identification and Involvement of Relevant Stakeholders
Specialized Compliance Requirements for Highly Regulated Industries
Impact of Distributed Information Technology Model
Understand Implications of Cloud to Enterprise Risk Management
Assess Providers Risk Management Programs
Differences between Data Owner/Controller vs. Data Custodian/Processor
Regulatory Transparency Requirements
Risk Treatment
Risk Frameworks
Metrics for Risk Management
Assessment of Risk Environment
Understand Outsourcing and Cloud Contract Design
agement
Contract Management
Supply Chain Management

Materijali za čitanje i slajdovi za prezentacije u učionici su na engleskom jeziku.

Preporučeno predznanje

Iskustvo u IT i bezbednosti informacija: Čvrsto iskustvo u informatici, posebno u bezbednosti informacija, sa najmanje pet godina kumulativnog, plaćenog i punog radnog iskustva u IT oblasti. Od ovih pet godina, tri godine mora biti u bezbednosti informacija i jedna godina mora biti u jednom ili više od šest domena Common Body of Knowledge (CBK) CCSP-a.
Znanje o cloud računarstvu: Poznavanje cloud računarskih koncepata i arhitektura, uključujući različite modele cloud servisa (IaaS, PaaS, SaaS), modele implementacije (javni, privatni, hibridni) i ključne cloud tehnologije.
Razumevanje mreža i IT infrastrukture: Osnovno razumevanje mrežnih principa i infrastrukture, uključujući znanje o TCP/IP, firewall-ovima, VPN-ovima i drugim mrežnim tehnologijama.
Poznavanje upravljanja, rizika i usklađenosti: Znanje o pravnim, regulatornim i usklađenosnim pitanjima povezanim sa cloud bezbednošću, kao i okvirima za upravljanje rizicima i upravljanje.
Znanja u bezbednosnoj arhitekturi i inženjeringu: Iskustvo u bezbednosnoj arhitekturi, uključujući dizajniranje bezbednih aplikacija, sistema i mrežnih arhitektura.
Osnovna znanja o virtualizaciji: Razumevanje tehnologija virtualizacije i njihove upotrebe u cloud okruženjima.

Stručno usavršavanje i sertifikacija

Karakteristike ispita

Priprema za Certified Cloud Security Professional (CCSP) sertifikaciju
Cena: 599 USD
Tipovi pitanja: Višestruki izbor
Trajanje: 3 sata
Broj pitanja: 150
Prolazna ocena: 700/1000

Teme ispita

Koncepti, arhitektura i dizajn cloud računarstva
Bezbednost podataka u cloud računarstvu
Bezbednost cloud platforme i infrastrukture
Bezbednost cloud aplikacija
Bezbednosne operacije u cloud računarstvu
Pravni aspekti, rizici i usklađenost

Obuka Certified Cloud Security Professional (CCSP) (CS8527) se obraća IT profesionalcima i specijalistima za bezbednost koji žele da steknu naprednu ekspertizu u cloud bezbednosti. Ova svetski priznata sertifikacija, koju nudi (ISC)², potvrđuje vašu sposobnost obezbeđivanja cloud okruženja uz poštovanje industrijskih standarda. Obuka pokriva šest osnovnih domena cloud bezbednosti, pružajući sveobuhvatno razumevanje metoda za zaštitu osetljivih podataka u cloud-u.

Učesnici imaju koristi od interaktivnih sesija i praktičnih vežbi, pripremajući ih za uspešno polaganje CCSP sertifikacije. Ova akreditacija demonstrira vaše ovladavanje složenim izazovima povezanim sa cloud bezbednošću.

Zašto odabrati CCSP obuku?

Cloud računarstvo je postalo stub moderne IT infrastrukture, povećavajući potražnju za kvalifikovanim profesionalcima sposobnim da obezbede cloud okruženja. CCSP sertifikacija potvrđuje vaše kompetencije u dizajniranju, upravljanju i obezbeđivanju podataka, aplikacija i infrastruktura u cloud-u.

Ova obuka vas opremava potrebnim veštinama za postizanje izvrsnosti u ulogama kao što su cloud bezbednosni arhitekta, cloud usklađenosni analitičar i IT rukovodilac. Dobijanje CCSP sertifikacije vas pozicionira kao lidera u oblasti cloud bezbednosti koja se stalno razvija.

Veštine koje ćete steći tokom obuke

Duboko znanje cloud bezbednosti
Ovladajte sa šest domena Common Body of Knowledge (CBK) CCSP-a, uključujući cloud arhitekturu, bezbednosne operacije i upravljanje rizicima.
Zaštita podataka i usklađenost
Naučite da obezbeđujete podatke u tranzitu, u mirovanju i tokom obrade, uz garantovanje usklađenosti sa globalnim propisima.
Dizajniranje i implementacija cloud bezbednosti
Razvijte ekspertizu u dizajniranju bezbednih cloud okruženja i implementaciji robusnih bezbednosnih mera.
Upravljanje identitetima i pristupom
Razumejte kako da upravljate korisničkim identitetima, dozvolama pristupa i višefaktorskom autentifikacijom u cloud sistemima.
Odgovor na incidente i oporavak nakon katastrofe u cloud-u Razvijte strategije za otkrivanje, odgovaranje i oporavak od bezbednosnih incidenata u cloud okruženjima..
Priprema za CCSP sertifikacioni ispit
Steknite znanja i alate potrebne za uspešno polaganje CCSP sertifikacionog ispita sa pouzdanjem.

Interaktivna obuka sa ekspertima iz sektora

CCSP obuku drže sertifikovani instruktori sa velikim iskustvom u cloud bezbednosti. Učesnici imaju koristi od stvarnih scenarija, studija slučaja i praktičnih laboratorija koji premošćavaju jaz između teorije i konkretne primene.

Kome je namenjena ova obuka?

Ova obuka je idealna za:

IT profesionalce specijalizovane za cloud bezbednost
Bezbednosne arhitekte i analitičare koji upravljaju cloud okruženjima environnements cloud
Odgovorne za usklađenost koji paze na poštovanje propisa o cloud bezbednosti
Pojedince koji se pripremaju za CCSP sertifikacioni ispit

Osigurajte svoju budućnost u cloud bezbednosti sa CCSP sertifikacijom

Obuka Certified Cloud Security Professional (CCSP) (CS8527) vas opremava znanjima i ekspertizom potrebnim za suočavanje sa jedinstvenim izazovima cloud bezbednosti. Prijavite se već danas da dobijete svetski priznatu sertifikaciju i napredujete u ovoj oblasti velike potražnje.

Certified Cloud Security Professional (CCSP) (CS8527)

Povezane obuke

Ekskluzivnosti

Primenjiva rešenja

LEARNING PASSPORTS

Otvorena obuka

Privatna obuka

Kako dobiti ponudu?