ISC2 Certified Cloud Security Professional (CCSP) Cert Prep

10h 4mIntermediate2025-07-03

Authors

Cybrary

Course details

The CCSP exam demonstrates professionals have the advanced technical skills and knowledge to design, manage and secure data, applications and infrastructure in the cloud. This course helps you build the knowledge and understanding you need to take the exam successfully. Learn about cloud concepts, architecture, and design. Explore cloud data security, cloud platform, and infrastructure security. Deep dive into cloud application security and cloud security operations. Plus, build your understanding of legal, risk, and compliance.

Skills covered

Data PrivacyCloud SecurityNetwork SecurityCloud AdministrationCybersecurityCert PrepCloud ComputingData Science

Concepts

0. Introduction

01 - Introduction to CCSP

1. Cloud Concepts, Architecture, and Design

02 - Domain 1 overview
03 - Cloud computing definitions, roles, and responsibilities
04 - Key cloud computing characteristics
05 - Building block technologies
06 - Cloud activities, service capabilities and categories, and deployment models
07 - Cloud shared considerations
08 - Impact of related technologies
09 - Cryptography and key management
10 - Identity and access control
11 - Data and media sanitization
12 - Network security
13 - Virtualization security
14 - Common threats
15 - Security hygiene
16 - Cloud secure data lifecycle
17 - Business continuity and disaster recovery in the cloud
18 - Business impact analysis and functional security requirements
19 - Service model security considerations and cloud design patterns
20 - DevOps security
21 - Verifications and certifications using common standards

2. Cloud Data Security

22 - Domain 2 overview
23 - Cloud data life cycle, data dispersion, and data flows
24 - Storage types
25 - Storage threats
26 - Encryption and key management
27 - Hashing, data obfuscation, and tokenization
28 - Data loss prevention, keys, secrets, and certificates
29 - Different structures of data and data location
30 - Data classification policies
31 - Data mapping and labeling
32 - Information rights management
33 - Data retention policies
34 - Data deletion, archiving, and legal hold
35 - Enable data audit, trace, and accountability

3. Cloud Platform and Infrastructure Security

36 - Domain 3 overview
37 - Physical environment
38 - Network communications and computing
39 - Virtualization
40 - Storage
41 - Management plane
42 - Design a secure data center
43 - Risk analysis
44 - Cloud vulnerabilities, threats, attacks, and risk mitigation
45 - Physical and environmental protection
46 - System, storage, and communication protection
47 - Identification, authentication, and authorization in the cloud
48 - Audit mechanisms
49 - Business continuity (BC) and disaster recovery (DR) strategies
50 - Business requirements
51 - BC and DR planning and testing

4. Cloud Application Security

52 - Domain 4 overview
53 - Cloud development basics, common pitfalls, and vulnerabilities
54 - Secure software development
55 - Business requirements, phases, and methodologies
56 - Cloud specific risks
57 - Threat modeling
58 - Layered security, secure coding, and configuration
59 - Cloud software assurance and validation
60 - Application testing
61 - Securing APIs and supply chains
62 - Validating and managing third-party and open-source software
63 - Supplemental security components
64 - Cryptography, sandboxing, virtualization, and orchestration
65 - Federated identity, identity providers (IdP), and SSO
66 - MFA, cloud access security brokers, and secrets management

5. Cloud Security Operations

67 - Domain 5 overview
68 - Hardware security
69 - Virtualization management, security, and tool sets
70 - Remote access
71 - Secure network configurations and controls
72 - Operating system hardening and configuration
73 - Availability of hosts and guest operating systems
74 - Performance, capacity, and hardware monitoring
75 - Infrastructure as code and the management plane
76 - Program management, part 1
77 - Program management, part 2
78 - Program management, part 3
79 - Program management, part 4
80 - Forensics, evidence collection, and preservation
81 - Communication and cloud stakeholders
82 - Security operations and intelligent monitoring
83 - Logging, incident management, and vulnerability assessments

6. Legal, Risk, and Compliance

84 - Domain 6 overview
85 - Cloud legal requirements
86 - Legal frameworks and forensics
87 - Privacy in the cloud, part 1
88 - Privacy in the cloud, part 2
89 - Cloud auditing
90 - Audit analysis
91 - Distributed infrastructure and compliance
92 - Enterprise risk management, part 1
93 - Enterprise risk management, part 2
94 - Outsourcing and cloud contracts