Certified Cloud Security Professional Prüfungsvorbereitungskurs / (ISC)² CCSP
Ein CCSP wendet sein Fachwissen im Bereich der Informationssicherheit auf eine Cloud-Computing-Umgebung an und demonstriert seine Kompetenz in den Bereichen Cloud-Sicherheitsarchitektur, Design, Betrieb und Service-Orchestrierung. Diese berufliche Kompetenz wird anhand eines weltweit anerkannten Wissensbestands gemessen.
Wenn Sie eine professionelle Karriere in der Informationssicherheit planen, darf die ISC² Zertifizierung in Ihrem Profil nicht fehlen!
Inhalt
- Die 6 Domains (ISC)² CCSP Certified Cloud Security Professional
- Domain 1. Cloud Concepts, Architecture and Design
- Understand cloud computing concepts
- Describe cloud reference architecture
- Understand security concepts relevant to cloud computing
- Understand design principles of secure cloud computing
- Evaluate cloud service providers
- Domain 2. Cloud Data Security
- Describe cloud data concepts
- Design and implement cloud data storage architectures
- Design and apply data security technologies and strategies
- Implement data discovery
- Plan and implement data classification
- Design and implement Information Rights Management (IRM)
- Plan and implement data retention, deletion and archiving policies
- Design and implement auditability, traceability and accountability of data events
- Domain 3. Cloud Platform & Infrastructure Security
- Comprehend cloud infrastructure and platform components
- Design a secure data center
- Analyze risks associated with cloud infrastructure and platforms
- Plan and implementation of security controls
- Plan business continuity (BC) and disaster recovery (DR)
- Domain 4. Cloud Application Security
- Advocate training and awareness for application security
- Describe the Secure Software Development Life Cycle (SDLC) process
- Apply the Secure Software Development Life Cycle (SDLC)
- Apply cloud software assurance and validation
- Use verified secure software
- Comprehend the specifics of cloud application architecture
- Design appropriate identity and access management (IAM) solutions
- Domain 5. Cloud Security Operations
- Build and implement physical and logical infrastructure for cloud environment
- Operate and maintain physical and logical infrastructure for cloud environment
- Implement operational controls and standards (e.g., Information Technology Infrastructure Library (ITIL), International Organization for Standardization/International Electrotechnical
Commission (ISO/IEC) 20000-1) - Support digital forensics
- Manage communication with relevant parties
- Manage security operations
- Domain 6. Legal, Risk & Compliance
- Articulate legal requirements and unique risks within the cloud environment
- Understand privacy issues
- Understand audit process, methodologies, and required adaptations for a cloud environment
- Understand implications of cloud to enterprise risk management
- Understand outsourcing and cloud contract design
Voraussetzungen
Sie müssen mindestens fünf Jahre Berufserfahrung in der IT haben, davon mind. 3 Jahre im Bereich Informationssicherheit, davon mindestens 1 Jahr Erfahrung in einem oder mehrere der sechs Domänen des CCSP Common Body of Knowledge (CBK). Mit der (ISC)² CISSP Zertifizierung erfüllen Sie automatisch alle Voraussetzungen.
