Certificate of Cloud Security Knowledge (CCSK) Foundation (CSA authorized) Training Course

Module 1. Cloud Architecture

This module establishes the foundational principles of cloud computing, encompassing definitions, architectural frameworks, and the function of virtualization. Instruction covers cloud service models, delivery mechanisms, and core characteristics. The curriculum also introduces the Shared Responsibilities Model and provides a structured approach to cloud security governance for government operations.

Topics Covered:

• Unit 1 - Introduction to Cloud Computing
• Unit 2- Introduction & Cloud Architecture
• Unit 3 - Cloud Essential Characteristics
• Unit 4 - Cloud Service Models
• Unit 5 - Cloud Deployment Models
• Unit 6 - Shared Responsibilities

Module 2. Infrastructure Security for Cloud

This section examines the securing of core cloud infrastructure, including cloud components, network configurations, management interfaces, and administrator credentials. Instruction addresses virtual networking and workload security, covering foundational concepts regarding containers and serverless architectures relevant to federal IT environments.

Topics Covered:

• Unit 1 - Module Intro
• Unit 2 - Intro to Infrastructure Security for Cloud Computing
• Unit 3 - Software Defined Networks
• Unit 4 - Cloud Network Security
• Unit 5 - Securing Compute Workloads
• Unit 6 - Management Plane Security
• Unit 7 - BCDR

Module 3. Managing Cloud Security and Risk

This module addresses critical considerations for cloud security management, beginning with risk assessment and governance frameworks. It explores legal and compliance obligations, including discovery requirements within cloud environments. The course also reviews key Cloud Security Alliance (CSA) risk mitigation tools, such as the Consensus Assessments Initiative Questionnaire (CAIQ), Cloud Controls Matrix (CCM), and STAR registry, to support regulatory adherence for government agencies.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Governance
• Unit 3 - Managing Cloud Security Risk
• Unit 4 - Legal
• Unit 5 - Legal Issues In Cloud
• Unit 6 - Compliance
• Unit 7 - Audit
• Unit 8 - CSA Tools

Module 4. Data Security for Cloud Computing

This module covers information lifecycle management within cloud environments and the application of security controls, with a focus on public cloud architectures. Topics include the data security lifecycle, cloud storage models, security implications across various delivery models, and encryption management, including Bring Your Own Key (BYOK) practices essential for sensitive government data.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Cloud Data Storage
• Unit 3 - Securing Data In The Cloud
• Unit 4 - Encryption For IaaS
• Unit 5 - Encryption For PaaS & SaaS
• Unit 6 - Encryption Key Management
• Unit 7 - Other Data Security Options
• Unit 8 - Data Security Lifecycle

Module 5. Application Security and Identity Management for Cloud Computing

This section addresses identity management and application security for cloud deployments. Key areas of study include federated identity, diverse Identity and Access Management (IAM) applications, secure software development principles, and strategies for managing application security in cloud-based systems serving government functions.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Secure Software Development Life Cycle (SSDLC)
• Unit 3 - Testing & Assessment
• Unit 4 - DevOps
• Unit 5 - Secure Operations
• Unit 6 - Identity & Access Management Definitions
• Unit 7 - IAM Standards
• Unit 8 - IAM In Practice

Module 6. Cloud Security Operations

This module outlines key considerations for evaluating, selecting, and managing cloud service providers. It also discusses the role of Security as a Service (SECaaS) providers and the implications of cloud adoption on incident response protocols for government entities.

Topics Covered:

• Unit 1 - Module Introduction
• Unit 2 - Selecting A Cloud Provider
• Unit 3 - SECaaS Fundamentals
• Unit 4 - SECaaS Categories
• Unit 5 - Incident Response
• Unit 6 - Domain 14 Considerations
• Unit 7 - CCSK Exam Preparation