CCSK Training, Certification and Course

On this 2-day accelerated Firebrand course for CSA's Certificate of Cloud Security Knowledge (CCSK) exam, you'll validate your understanding of the best practices surrounding cloud security. This Firebrand course, designed to deliver knowledge equivalent to the CSA's CCSK Basic and the CCSK Plus, aims to ensure that you have a demonstrated awareness of the security threats facing your cloud infrastructure.

On this Firebrand course you'll cover:

A comprehensive review of cloud security fundamentals
The major domains in the latest Guidance document from Cloud Security Alliance (CSA)
Recommendations from the European Network and Information Security Agency (ENISA)
Expanded material and hands-on tasks in a series of exercises that include bringing a fictional organisation securely into the cloud.

Firebrand's unique Lecture | Lab | Review technique combines both theoretical knowledge with practical, hands-on skills. This technique will accelerate your learning and ensure you have the ability to apply your new found knowledge as soon as you return to work.

Seven reasons why you should sit your course with Firebrand Training

You'll be CCSK certified in just 2 days. With us, you’ll be CCSK trained in record time
Our CCSK course is all-inclusive. A one-off fee covers all course materials, exams, accommodation and meals. No hidden extras
Pass CCSK first time or train again for free. This is our guarantee. We’re confident you’ll pass your course first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
You’ll learn more. A day with a traditional training provider generally runs from 9am – 5pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day quality learning time, with your instructor
You’ll learn CCSK faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
You’ll be studying CCSK with the best. We’ve been named in Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified 75348 professionals, and we’re partners with all of the big names in the business
You'll do more than study Firebrand's courseware. We use practical exercises to make sure you can apply your new knowledge to the work environment. Our instructors use demonstrations and real-world experience to keep the day interesting and engaging

Think you are ready for the course? Take a FREE practice test to assess your knowledge!

Benefits of Training with Firebrand

Distraction-free residential training - you’ll live just steps away from your classroom
A purpose-built training centre – get access to dedicated Pearson VUE Select facilities
Your Certification Guarantee – pass first time or train again free (just pay for accommodation, exams and incidental costs)
Everything you need to certify – you’ll even sit your exam on the course and return home certified
No hidden extras – one cost covers everything you need to certify

See Curriculum...

On this Firebrand Course, you'll cover the following topics:

Domain 1: Cloud Computing Concepts and Architectures

Defining Cloud Computing
Definitional Model

Essential Characteristics
Service Models
Deployment Models

Reference and Architecture Models

Infrastructure as a Service
Platform as a Service
Software as a Service

Logical Model
Cloud Security and Compliance Scope and Responsibilities
Cloud Security Models

A Simple Cloud Security Process Model

Governing in the Cloud
Operating in the Cloud

Domain 2: Governance and Enterprise Risk Management

Governance

Tools of Cloud Governance

Enterprise Risk Management
The Effects of Service Model and Deployment Model

Service Models
Deployment Models
Cloud Risk Management Trade-Offs
Cloud Risk Management Tools

Domain 3: Legal Issues, Contracts and Electronic Discover

Legal Frameworks Governing Data Protection and Privacy

Common Themes
Required Security Measures
Restrictions to Cross-border Data Transfers
Regional Examples – GDPR, NIS Directive, US Federal and State Laws

Contracts and Provider Selection

Internal Due Diligence
Monitoring, Testing, and Updating
External Due Diligence
Contract Negotiations
Reliance on Third-Party Audits and Attestations

Electronic Discovery

Possession, Custody and Control
Relevant Cloud Applications and Environment
Searchability and E-Discovery Tools
Preservation
Data Retention Laws and Record Keeping Obligations
Collection
Direct Access
Native Production
Authentication
Cooperation Between Provider and Client in E-Discovery
Response to a Subpoena or Search Warrant
More Information

Domain 4: Compliance and Audit Management

Compliance

How Cloud Changes Compliance

Audit Management

How Cloud Changes Audit Management

Domain 5: Information Governance

Cloud Information Governance Domains
The Data Security Lifecycle

Locations and Entitlements
Functions, Actors, and Controls

Domain 6: Management Plane and Business Continuity

Business Continuity and Disaster Recovery in the Cloud

Architect for Failure

Management Plane Security

Accessing the Management Plane
Securing the Management Plane
Management Plane Security When Building/Providing a Cloud Service

Business Continuity and Disaster Recovery

Business Continuity Within the Cloud Provider
Business Continuity for Loss of the Cloud Provider
Business Continuity For Private Cloud and Providers

Domain 7: Infrastructure Security

Cloud Network Virtualisation
How Security Changes With Cloud Networking

Challenges of Virtual Appliances
SDN Security Benefits
Microsegmentation and the Software Defined Perimeter
Additional Considerations for Cloud Providers or Private Clouds
Additional Considerations for Cloud Providers or Private Clouds

Cloud Compute and Workload Security

How Cloud Changes Workload Security
Immutable Workloads Enable Security
The Impact of Cloud on Standard Workload Security Controls
Changes to Workload Security Monitoring and Logging
Changes to Vulnerability Assessment
Cloud Storage Security

Domain 8: Virtualisation and Containers

Major Virtualisation Categories Relevant to Cloud Computing

Compute

Network

Monitoring and Filtering
Management Infrastructure
Cloud Overlay Networks

Storage
Containers

Domain 9: Incident Response

Incident Response Lifecycle
How the Cloud Impacts IR

Preparation
Detection and Analysis
Containment, Eradication and Recovery
Post-mortem

Domain 10: Application Security

Introduction to the Secure Software Development Lifecycle and Cloud Computing
Secure Design and Development
Secure Deployment

Impact on Vulnerability Assessment
Impact on Penetration Testing
Deployment Pipeline Security
Impact of Infrastructure as Code and Immutable

Secure Operations
How Cloud Impacts Application Design and Architectures
Additional Considerations for Cloud Providers
The Rise and Role of DevOps

Security Implications and Advantages

Domain 11: Data Security and Encryption

Data Security Controls
Cloud Data Storage Types
Managing Data Migrations to the Cloud

Securing Cloud Data Transfers

Securing Data in the Cloud

Cloud Data Access Controls
Storage (At-Rest) Encryption and Tokenization
Key Management (Including Customer-Managed Keys)

Data Security Architectures
Monitoring, Auditing, and Alerting
Additional Data Security Controls

Cloud Platform/Provider-Specific Controls
Data Loss Prevention
Enterprise Rights Management
Data Masking and Test Data Generation

Enforcing Lifecycle Management Security

Domain 12: Identity, Entitlement, and Access Management

How IAM is Different in the Cloud
IAM Standards for Cloud Computing
Managing Users and Identities for Cloud Computing
Authentication and Credentials
Entitlement and Access Management
Privileged User Management

Domain 13: Security as a Service

Potential Benefits and Concerns of SecaaS
Major Categories of Security as a Service Offerings

Identity, Entitlement, and Access Management Services
Cloud Access and Security Brokers (CASB, also known as Cloud Security Gateways)
Web Security (Web Security Gateways)
Email Security
Security Assessment
Web Application Firewalls
Intrusion Detection/Prevention (IDS/IPS)
Security Information & Event Management (SIEM)
Encryption and Key Management
Business Continuity and Disaster Recovery
Security Management
Distributed Denial of Service Protection

Domain 14: Related Technologies

Big Data

Security and Privacy Considerations
Data Collection
Key Management
Security Capabilities
Identity and Access Management
PaaS

Internet of Things (IoT)
Mobile
Serverless Computing

See Exam Track...

You'll sit the following exam at the Firebrand Training Centre, covered by your Certification Guarantee:

CSA Certificate of Cloud Security Knowledge (CCSK) exam

Additional exam information:

60 online multiple choice questions
Time limit: 90 minutes
Pass rate: 80%

See What's Included...

Your accelerated course includes:

Accommodation
Meals, unlimited snacks, beverages, tea and coffee
On-site exams**
Exam vouchers**
Practice tests*
Certification Guarantee**
Courseware
Up-to 12 hours of instructor-led training each day
24-hour lab access
Hands-on training through Lecture | Lab | Review^TM
Digital courseware (if available)

* Some exceptions apply
** Some exceptions apply. Please refer to the Exam Track
*** Pass first time or train again free (just pay for accommodation, exams and incidental costs)

See Prerequisites...

You should have a basic understanding of security fundamentals, such as firewalls, secure development, encryption and identity management.

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.

See Dates...

CSA CCSK Course Dates

Start	Finish	Status	Location
24/2/2020 (Monday)	25/2/2020 (Tuesday)	Finished	-
29/6/2020 (Monday)	30/6/2020 (Tuesday)	Wait list	Nationwide
10/8/2020 (Monday)	11/8/2020 (Tuesday)	Limited availability	Nationwide
21/9/2020 (Monday)	22/9/2020 (Tuesday)	Open	Nationwide
2/11/2020 (Monday)	3/11/2020 (Tuesday)	Open	Nationwide
14/12/2020 (Monday)	15/12/2020 (Tuesday)	Open	Nationwide

Here's the Firebrand Training review section. Since 2001 we've trained exactly 75348 students and asked them all to review our Accelerated Learning. Currently, 96.78% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.

"The tutor for my Course , was brilliant at going through what we needed to learn, in an easy and accessible manner. was always happy to go that further mile in helping, or making the explanations easier by means of pizza analogy for us to understand. good lad."
Aaron Ryan, CAF. (9/3/2020 to 12/3/2020)

"Coming to Firebrand training site was really enjoyable, the staff are really friendly and helpful! I am excited to come back soon!"
N.G.. (9/3/2020 to 12/3/2020)

"Well organised. Good venue. Excellent instructor."
David Parker, N/A. (9/3/2020 to 11/3/2020)

"Great organisation."
Prosper Mazhunga, NKTAM Investment. (9/3/2020 to 11/3/2020)

"Great training & accommodation."
C.D.. (9/3/2020 to 11/3/2020)

CSA Firebrand's training for CSA's Certified Cloud Security Knowledge (CCSK) exam