Duration
3 days
Overview
Certificate: Professional
Cloud Security Manager
Duration: 3 days
Domain: Cloud Computing
Course Delivery: Classroom, Virtual Classroom
Accreditor: Cloud Credential Council
Language: English
Credits: None
The Professional Cloud Security Manager (PCS) course is to explore relevant concepts related to security, risk and compliance within the cloud computing environment. The objectives for this course are to enable the candidates to apply the underpinning security concepts into an enterprise cloud computing environment. The risks and the impact of cloud computing must be understood in terms of both business and technical security challenges and their effect on business and technical governance and policy. The course also presents the terminologies used to describe security threats and issues and, in particular, those in cloud computing.
At the end of the course, the learner will be able to understand how to secure the different cloud computing services and deployment models and also how to design security in the cloud infrastructure, configurations and applications running within a cloud computing environment. It helps in understanding, applying and analyzing how to manage access to cloud computing resources using accounts, users and groups; and ways that the security manager can secure the data, operating systems, and applications and overall infrastructure within the cloud.
The course materials include comprehensive reference materials that help participants continue the educational experience after the course. The course prepares candidates for the Professional Cloud Security Manager exam provided by the Cloud Credential Council.
Audience
The Professional Cloud Security Manager course will be of interest to:
- IT Security Professionals (e.g., Security Engineers, Analysts and Architectures)
- IT Risk and Compliance Professionals (e.g., Risk Management, Audit and Compliance Managers).
- Auditors of Cloud Computing Services
- Network Engineers/Administrators
- Email System Administrators
Learning Objectives
By the end of this course participants gain competencies in, and are able to:
- Explain what it takes to secure the different cloud computing services and deployment models.
- Explain design security regarding the cloud infrastructure, configurations, and applications running within a cloud computing environment.
- Explain, apply, and analyze how to manage access to cloud computing resources using accounts, users, and groups.
- Explain, apply, and analyze methods to secure data, operating systems, applications, and the overall infrastructure of the cloud.
Prerequisites
There are no formal prerequisites; however, it is recommended that participants have five years of Enterprise Security experience and solid understanding of cloud computing services and deployment models.
Course Logistics
- Classroom – U-shaped setup preferred
- Whiteboard, flipchart, and projector
- Participants – maximum of 16, no minimum requirement
Course Materials
For Participants
- Course book
For Instructor
- Presentations
- Course book
Course Agenda
Day 3
- 1. Course Introduction
Review Day 1
Review Day 2
- 2. Cloud Computing: Security, Risks, and Governance
Case Study
- 7. Business Continuity, Disaster Recovery, and Capacity/Performance Planning (Contd.)
- 3. Physical and Operations Security: A Shared Responsibility
- 5. Legal, Contractual, and Operational Monitoring in the Cloud
- 8. Advanced Cloud Security Management Practices
- 4. Security Management Controls in Cloud Computing
- 6. Network Security Management in the Cloud
Case Study (Contd.)
- 7. Business Continuity, Disaster Recovery, and Capacity/Performance Planning
Exam Preparation Guide
Self-Study and Q & A
Exam (if taken on the
same day)
Overview
- Course Learning Objectives
- Course Agenda
- Activities
- Case Study
- Certification
Module 2: Cloud Computing: Security, Risks, and Governance
- Module Learning Objectives
- Module Topics
- Cloud Computing Basics
- Information Security Management
- IT Governance
- Cloud Computing Security
Module 3: Physical and Operations Security: A Shared Responsibility
- Module Learning Objectives
- Module Topics
- Security and Compliance: A Shared Responsibility
- Physical and Operations Security Considerations
- Risk Management: A Shared Perspective
Module 4: Security Management Controls in Cloud Computing
- Module Learning Objectives
- Module Topics
- Identity and Access Management
- Data Protection
- Data Security Lifecycle
- Forensics in the Cloud
Module 5: Legal, Contractual, and Operational Monitoring in the Cloud
- Module Learning Objectives
- Module Topics
- Legal and Regulatory Landscape
- Monitoring: Providers and Subscribers
- Security Operations in the Cloud
Module 6: Network Security Management in the Cloud
- Module Learning Objectives
- Module Topics
- Network Management in the Cloud
- Vulnerability Management
- Cloud Security Architecture
Module 7: Business Continuity, Disaster Recovery, and Capacity/Performance Planning
- Module Learning Objectives
- Module Topics
- Business Continuity
- Disaster Recovery Resilient Technology
- Capacity and Performance Planning for Cloud
Module 8: Advanced Cloud Security Management Practices
- Module Learning Objectives
- Module Topics
- Advanced Security Considerations
- Secure Development Standards in the Cloud
- Cloud Security Planning
Module Summary
Exam Information
Exam Description
The Professional Cloud Security Manager exam is delivered and evaluated by EXIN on behalf of CCC.
Exam Facts
Delivery
Online and paper-based
Format
Closed Book
Proctoring
Web proctored
Duration
60 minutes, 15 minutes additional time for non-native candidates
# of questions
Pass Grade
65%
Exam Prerequisites
Prerequisites for taking this exam include:
- The candidate must have attended a practitioner level training covering the concepts of cloud security.
It is also recommended that participants have achieved a Cloud Technology Associate certification from CCC or its equivalent. This is to demonstrate that the participants are conversant with cloud concepts and vocabulary.
Proctor Requirements
The Professional Cloud Security Manager exam can be proctored by the instructor of the Professional Cloud Security Manager course or through the web proctoring service from EXIN.
Proctors must:
- Be proficient in the language of the exam being delivered
- Possess the ability to read and complete all exam documentation in a legible manner
- Possess the ability to detect various forms of candidate misconduct
- Be impartial ie: cannot be related to or have a reporting relationship with the candidates
- Be professional in their presentation, responsible, punctual, tactful, mature, able to work unsupervised and able to speak publicly.
In order for a proctor to be registered, the proctor must:
- Remain impartial and comply at all times with the conditions for proctoring
- Read and follow the instructions provided via email
- Sign a Nondisclosure Form (NDA)
- Complete a brief training session (about 10 minutes) via telephone with the Proctor Coordinator
After the exam session proctors must:
- Submit the Proctor Report outlining any incidents.
Exam Location
The exam can take place at any location - in class or as a web proctored exam.
Exam Planning
- Exams can be taken on the last day of the course or later.
Course Specific Delivery Information
Course Delivery Requirements
Prerequisites for Participants
There are no formal prerequisites; however, it is recommended that participants have five years of Enterprise Security experience and solid understanding of cloud computing services and deployment models.
Class Size
Maximum: There is no maximum number of participants. However, please consult with the trainer in the event a request is made for over 20 participants.
Minimum: 6 recommended, but the course can be run with less.
Accreditation Requirements
The course is accredited by:
- Cloud Credential Council
Instructor Requirements
Only accredited trainers from EXIN can deliver CCC accredited training.
- The candidate holds the Cloud Technology Associate certification (a recommended requirement) or has equivalent knowledge.
- The candidate has passed the Professional Cloud Security Manager exam (with a passing score of 75%).
- The candidate has paid the annual trainer fee to CCC and is a registered CCC instructor.
- The candidate has a bachelor’s, or higher, degree in a related field or equivalent work experience.
- The candidate has successfully delivered training programs in the past (minimum 2 years).
- The candidate is an approved CCC trainer.
Train The Trainer Program
Becoming an CCC Trainer:
Application
A CCC Accredited Trainer Application form should be used to initiate the request to become a CCC accredited trainer.
Step 1 Meet eligibility and become a CCC Accredited Trainer
ITpreneurs need to check if the applicant should meet all eligibility requirements and sends required documents are sent to CCC for evaluation.
Step 2 ICF
- The candidate must undergo a familiarization session with the ITpreneurs master trainer.
Step 3 Assessment
The Master Trainer reviews the Trainee's style and interaction, how the Trainee handles questions and clearly demonstrates confidence and knowledge of the course topics.
Specific criteria the Master Trainer will apply may include:
- Does the Trainer display good communication and coaching skills in the training environment?
- Does the Trainer demonstrate a good grasp of the key points of the session(s) and are they able to impart these to the delegates?
- Does the Trainer demonstrate familiarity with, and facility of use of, all the course materials, including any exercises and case studies?
- Can the Trainer provide accurate and appropriate answers to questions asked by delegates?
- Does the Trainer demonstrate an understanding of the contents of the product/method?
- Does the Trainer demonstrate an ability to interrelate and link different parts of the product/method?
- Is the Trainer familiar with examination administration, including the invigilation of the examinations?
- Can the Trainer furnish relevant examples to bring the product/method to life?
- Can the Trainer relate the product/method to the needs of different types and sizes of environments?
- The Master Trainer then completes an approval report, and gives a category for the Trainee's assessment.
Ordering Information:
Standard Procedures apply
ITpreneurs Services Teams / Contact Information
ITpreneurs Customer Solutions Team
ITpreneurs Service Desk Team
ITpreneurs Exam Team
Exam support, login questions, and proctor support questions;
Programme scope, delivery arrangements and suitability are confirmed during enquiry.