CCSK Training, Certification and Course

On this 2-day accelerated Firebrand course for CSA's Certificate of Cloud Security Knowledge (CCSK) exam, you'll validate your understanding of the best practices surrounding cloud security. This Firebrand course, designed to deliver knowledge equivalent to the CSA's CCSK Basic and the CCSK Plus, aims to ensure that you have a demonstrated awareness of the security threats facing your cloud infrastructure.

On this Firebrand course you'll cover:

A comprehensive review of cloud security fundamentals
The major domains in the latest Guidance document from Cloud Security Alliance (CSA)
Recommendations from the European Network and Information Security Agency (ENISA)
Expanded material and hands-on tasks in a series of exercises that include bringing a fictional organisation securely into the cloud.

Firebrand's unique Lecture | Lab | Review technique combines both theoretical knowledge with practical, hands-on skills. This technique will accelerate your learning and ensure you have the ability to apply your new found knowledge as soon as you return to work.

Seven reasons why you should sit your course with Firebrand Training

Two options of training. Choose between residential classroom-based, or online CCSK courses
You'll be CCSK certified in just 2 days. With us, you’ll be CCSK trained in record time
Our CCSK course is all-inclusive. A one-off fee covers all course materials, exams, accommodation and meals. No hidden extras
Pass CCSK first time or train again for free. This is our guarantee. We’re confident you’ll pass your course first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
You’ll learn more. A day with a traditional training provider generally runs from 9am – 5pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day quality learning time, with your instructor
You’ll learn CCSK faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
You’ll be studying CCSK with the best. We’ve been named in Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified 75626 professionals, and we’re partners with all of the big names in the business

Think you are ready for the course? Take a FREE practice test to assess your knowledge!

Benefits of Training with Firebrand

Two options of training - Residential classroom-based, or online courses
A purpose-built training centre – get access to dedicated Pearson VUE Select facilities
Certification Guarantee – pass first time or train again free (just pay for accommodation, exams and incidental costs)
Everything you need to certify – you’ll sit your exam on the course and return home certified
No hidden extras – one cost covers everything you need to certify

See Curriculum...

On this Firebrand Course, you'll cover the following topics:

Domain 1: Cloud Computing Concepts and Architectures

Defining Cloud Computing
Definitional Model

Essential Characteristics
Service Models
Deployment Models

Reference and Architecture Models

Infrastructure as a Service
Platform as a Service
Software as a Service

Logical Model
Cloud Security and Compliance Scope and Responsibilities
Cloud Security Models

A Simple Cloud Security Process Model

Governing in the Cloud
Operating in the Cloud

Domain 2: Governance and Enterprise Risk Management

Governance

Tools of Cloud Governance

Enterprise Risk Management
The Effects of Service Model and Deployment Model

Service Models
Deployment Models
Cloud Risk Management Trade-Offs
Cloud Risk Management Tools

Domain 3: Legal Issues, Contracts and Electronic Discover

Legal Frameworks Governing Data Protection and Privacy

Common Themes
Required Security Measures
Restrictions to Cross-border Data Transfers
Regional Examples – GDPR, NIS Directive, US Federal and State Laws

Contracts and Provider Selection

Internal Due Diligence
Monitoring, Testing, and Updating
External Due Diligence
Contract Negotiations
Reliance on Third-Party Audits and Attestations

Electronic Discovery

Possession, Custody and Control
Relevant Cloud Applications and Environment
Searchability and E-Discovery Tools
Preservation
Data Retention Laws and Record Keeping Obligations
Collection
Direct Access
Native Production
Authentication
Cooperation Between Provider and Client in E-Discovery
Response to a Subpoena or Search Warrant
More Information

Domain 4: Compliance and Audit Management

Compliance

How Cloud Changes Compliance

Audit Management

How Cloud Changes Audit Management

Domain 5: Information Governance

Cloud Information Governance Domains
The Data Security Lifecycle

Locations and Entitlements
Functions, Actors, and Controls

Domain 6: Management Plane and Business Continuity

Business Continuity and Disaster Recovery in the Cloud

Architect for Failure

Management Plane Security

Accessing the Management Plane
Securing the Management Plane
Management Plane Security When Building/Providing a Cloud Service

Business Continuity and Disaster Recovery

Business Continuity Within the Cloud Provider
Business Continuity for Loss of the Cloud Provider
Business Continuity For Private Cloud and Providers

Domain 7: Infrastructure Security

Cloud Network Virtualisation
How Security Changes With Cloud Networking

Challenges of Virtual Appliances
SDN Security Benefits
Microsegmentation and the Software Defined Perimeter
Additional Considerations for Cloud Providers or Private Clouds
Additional Considerations for Cloud Providers or Private Clouds

Cloud Compute and Workload Security

How Cloud Changes Workload Security
Immutable Workloads Enable Security
The Impact of Cloud on Standard Workload Security Controls
Changes to Workload Security Monitoring and Logging
Changes to Vulnerability Assessment
Cloud Storage Security

Domain 8: Virtualisation and Containers

Major Virtualisation Categories Relevant to Cloud Computing

Compute

Network

Monitoring and Filtering
Management Infrastructure
Cloud Overlay Networks

Storage
Containers

Domain 9: Incident Response

Incident Response Lifecycle
How the Cloud Impacts IR

Preparation
Detection and Analysis
Containment, Eradication and Recovery
Post-mortem

Domain 10: Application Security

Introduction to the Secure Software Development Lifecycle and Cloud Computing
Secure Design and Development
Secure Deployment

Impact on Vulnerability Assessment
Impact on Penetration Testing
Deployment Pipeline Security
Impact of Infrastructure as Code and Immutable

Secure Operations
How Cloud Impacts Application Design and Architectures
Additional Considerations for Cloud Providers
The Rise and Role of DevOps

Security Implications and Advantages

Domain 11: Data Security and Encryption

Data Security Controls
Cloud Data Storage Types
Managing Data Migrations to the Cloud

Securing Cloud Data Transfers

Securing Data in the Cloud

Cloud Data Access Controls
Storage (At-Rest) Encryption and Tokenization
Key Management (Including Customer-Managed Keys)

Data Security Architectures
Monitoring, Auditing, and Alerting
Additional Data Security Controls

Cloud Platform/Provider-Specific Controls
Data Loss Prevention
Enterprise Rights Management
Data Masking and Test Data Generation

Enforcing Lifecycle Management Security

Domain 12: Identity, Entitlement, and Access Management

How IAM is Different in the Cloud
IAM Standards for Cloud Computing
Managing Users and Identities for Cloud Computing
Authentication and Credentials
Entitlement and Access Management
Privileged User Management

Domain 13: Security as a Service

Potential Benefits and Concerns of SecaaS
Major Categories of Security as a Service Offerings

Identity, Entitlement, and Access Management Services
Cloud Access and Security Brokers (CASB, also known as Cloud Security Gateways)
Web Security (Web Security Gateways)
Email Security
Security Assessment
Web Application Firewalls
Intrusion Detection/Prevention (IDS/IPS)
Security Information & Event Management (SIEM)
Encryption and Key Management
Business Continuity and Disaster Recovery
Security Management
Distributed Denial of Service Protection

Domain 14: Related Technologies

Big Data

Security and Privacy Considerations
Data Collection
Key Management
Security Capabilities
Identity and Access Management
PaaS

Internet of Things (IoT)
Mobile
Serverless Computing

See Exam Track...

You'll sit the following exam at the Firebrand Training Centre, covered by your Certification Guarantee:

CSA Certificate of Cloud Security Knowledge (CCSK) exam

Additional exam information:

60 online multiple choice questions
Time limit: 90 minutes
Pass rate: 80%

See What's Included...

Your accelerated course includes:

Accommodation *
Meals, unlimited snacks, beverages, tea and coffee *
On-site exams **
Exam vouchers **
Practice tests **
Certification Guarantee ***
Courseware
Up-to 12 hours of instructor-led training each day
24-hour lab access
Digital courseware **

* For residential training only. Doesn't apply for online courses
** Some exceptions apply. Please refer to the Exam Track or speak with our experts
*** Pass first time or train again free (just pay for accommodation, exams and incidental costs)

See Prerequisites...

You should have a basic understanding of security fundamentals, such as firewalls, secure development, encryption and identity management.

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.

See Dates...

CSA CCSK Course Dates

Start	Finish	Status	Location
24/2/2020 (Monday)	25/2/2020 (Tuesday)	Finished	-
29/6/2020 (Monday)	30/6/2020 (Tuesday)	Wait list	Nationwide
10/8/2020 (Monday)	11/8/2020 (Tuesday)	Limited availability	Nationwide
21/9/2020 (Monday)	22/9/2020 (Tuesday)	Open	Nationwide
2/11/2020 (Monday)	3/11/2020 (Tuesday)	Open	Nationwide
14/12/2020 (Monday)	15/12/2020 (Tuesday)	Open	Nationwide

Here's the Firebrand Training review section. Since 2001 we've trained exactly 75626 students and asked them all to review our Accelerated Learning. Currently, 96.76% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.

"Course was very good, I liked the analogies given to explain complex networking areas it really helped. The instructor was very good at bringing information to a level everyone could understand and then further on that. "
Ewan jamieson, Mr. (17/2/2020 to 22/2/2020)

"Knowledgeable, well spoken and relatable instructor. The instructor explained difficult concepts clearly and provided good examples to help us understand the material. He also discussed real-world examples to help solidify how the concepts are applied in the field. There were a few technical issues with the remote learning and remote labs, but overall a great experience, especially so when considering the current situation with COVID-19."
JE, Mitchells & Butlers. (4/5/2020 to 7/5/2020)

"I would highly recommend taking up a course with Firebrand because the way the course is delivered is very helpful and useful for someone who either has no knowledge or some knowledge. The instructors do everything they can to ensure everyone is learning and is always on hand to help anyone who is struggling with anything. Everyone on the course is also very helpful and in the same position as they want to learn to. So there is not just the instructor but the class as a whole to assist. The facility is very nice and I will definitely be coming back for any future courses I attend. "
CP, Innovate Ltd. (4/5/2020 to 7/5/2020)

"Firebrand have very passionate instructors."
Anonymous (4/5/2020 to 7/5/2020)

"Extremely useful course, detailed understanding and trainer had good grasp on the information and was able to explain it in different ways to help our understanding and help us to relate this to our own working environment."
SA, Lloyds Banking Group. (4/5/2020 to 6/5/2020)

CSA Firebrand's training for CSA's Certified Cloud Security Knowledge (CCSK) exam