(ISC)²

CCSP Course: Master Cloud Security Architecture

Prepare for the ISC2 CCSP certification. Pick the CCSP course that suits your goals and start setting the standard.

(CCSP.AE2) / ISBN : 978-1-64459-407-0
Lessons
Lab
TestPrep
AI Tutor (Add-on)
Get A Free Trial

About This Course

Enroll in our CCSP certification training, your study guide with hands-on labs & exercises to mastering cloud security and acing the exam.

In this course, dive into all six CCSP domains from cloud architecture and data security to legal compliance and operations. Learn to secure cloud platforms, mitigate risks, and implement best practices while testing your skills with practice exams & interactive tools.   

Skills You’ll Get

  • Cloud Security Architecture Design: Master the principles of secure cloud infrastructure, including deployment models, virtualization, and shared responsibility frameworks.
  • Cloud Data Protection & Encryption: Implement data classification, lifecycle management, and storage security strategies to safeguard sensitive cloud-based information.
  • Cloud Risk Assessment & Compliance: Evaluate legal, regulatory, and contractual cloud security requirements, including GDPR, HIPAA, and international standards.
  • Cloud Application Security: Develop and harden cloud-native applications using secure SDLC practices, IAM controls, and threat modeling.
  • Cloud Incident Response & Forensics: Detect, analyze, and mitigate cloud security breaches while maintaining chain-of-custody for investigations.
  • Cloud Vendor & Operations Management: Optimize third-party risk management, SLAs, and continuous monitoring for secure cloud service delivery.
Download Course Outline

1

Introduction

  • CCSP Certification
  • Taking the CCSP Exam
  • Computer-Based Testing Environment
  • Exam Retake Policy
  • Work Experience Requirement
  • Recertification Requirements
  • What Does This Course Cover?
  • CCSP Exam Objectives
  • CCSP Certification Exam Objective Map
2

Architectural Concepts

  • Cloud Characteristics
  • Business Requirements
  • Cloud Computing Service Categories
  • Cloud Deployment Models
  • Multitenancy
  • Cloud Computing Roles and Responsibilities
  • Cloud Computing Reference Architecture
  • Virtualization
  • Cloud Shared Considerations
  • Emerging Technologies
  • Summary
  • Exam Essentials
3

Data Classification

  • Data Inventory and Discovery
  • Information Rights Management
  • Data Control
  • Summary
  • Exam Essentials
4

Cloud Data Security

  • Cloud Data Lifecycle
  • Cloud Storage Architectures
  • Threats to Cloud Storage
  • Designing and Applying Security Strategies for Storage
  • Summary
  • Exam Essentials
5

Security in the Cloud

  • Shared Cloud Platform Risks and Responsibilities
  • Cloud Computing Risks by Deployment Model
  • Cloud Computing Risks by Service Model
  • Virtualization
  • Disaster Recovery (DR) and Business Continuity (BC)
  • Cloud Design Patterns
  • Summary
  • Exam Essentials
6

Cloud Platform, Infrastructure, and Operational Security

  • Foundations of Managed Services
  • Shared Responsibilities by Service Type
  • Securing Communications and Infrastructure
  • Securing Hardware and Compute
  • Securing Software
  • Managing Virtual Systems
  • Assessing Vulnerabilities
  • Securing the Management Plane
  • Auditing Your Environment and Provider
  • Summary
  • Exam Essentials
7

Cloud Application Security

  • Developing Software for the Cloud
  • Cloud Application Architecture
  • Cloud-Secure Software Development Lifecycle (SDLC)
  • Cloud Application Assurance and Validation
  • Identity and Access Management
  • Summary
  • Exam Essentials
8

Operations Elements

  • Designing a Secure Data Center
  • Managing Security Operations
  • Summary
  • Exam Essentials
9

Operations Management

  • Monitoring, Capacity, and Maintenance
  • Change and Configuration Management
  • Problem and Incident Management
  • IT Service Management and Continual Service Improvement
  • Business Continuity and Disaster Recovery
  • Summary
  • Exam Essentials
10

Legal and Compliance Issues

  • Legal Requirements and Unique Risks in the Cloud Environment
  • Analyzing a Law
  • Legal Liability
  • Torts and Negligence
  • U.S. Privacy and Security Laws
  • International Laws
  • Laws, Regulations, and Standards
  • Information Security Management Systems
  • Privacy in the Cloud
  • Cloud Forensics
  • Audit Processes, Methodologies, and Cloud Adaptations
  • Summary
  • Exam Essentials
11

Cloud Vendor Management

  • The Impact of Diverse Geographical Locations and Legal Jurisdictions
  • Security Policy Framework
  • Enterprise Risk Management
  • Risk Treatment and Response
  • Risk Analysis
  • Cloud Contract Design
  • Government Cloud Standards
  • Manage Communication with Relevant Parties
  • Summary
  • Exam Essentials

1

Architectural Concepts

  • Creating a Virtual Machine and Installing Ubuntu Using Hyper-V Manager
2

Data Classification

  • Displaying Metadata Information
  • Capturing Network Traffic
3

Cloud Data Security

  • Taking an Incremental Backup
  • Taking a Full Backup
  • Creating an Amazon S3 Glacier Vault
  • Observing an MD5-Generated Hash Value
  • Observing an SHA256-Generated Hash Value
  • Creating a CloudWatch Dashboard and Adding a Metric to it
4

Security in the Cloud

  • Performing a MITM Attack
  • Using Social Engineering Techniques to Plan an Attack
5

Cloud Platform, Infrastructure, and Operational Security

  • Configuring a Firewall for Inbound Rules
  • Setting up a Honeypot on Kali Linux
  • Enabling an Access Control List
  • Creating a VPC
  • Creating a Network ACL
  • Configuring Outbound Rules for a Firewall
  • Creating an Elastic Load Balancer
  • Creating a NAT Gateway
6

Cloud Application Security

  • Configuring a Proxy Server
  • Conducting IP Spoofing
  • Conducting Cross-site Request Forgery (CSRF or XSRF) Attacks
  • Attacking a Website Using Cross-Site Scripting (XSS) Injection
7

Legal and Compliance Issues

  • Completing the Chain of Custody
8

Cloud Vendor Management

  • Simulating the DDoS Attack

Any questions?
Check out the FAQs

  Want to Learn More?

Contact Us Now

  • CCSP is ideal for experienced professionals (5+ years in IT, 3+ in security) seeking advanced, globally recognized credentials in cloud security. It covers broader governance, compliance, and traditional security concepts, making it suitable for leadership roles like Cloud Architect or Security Manager. 
  • CCSK is entry-level (no experience required), focusing purely on cloud security fundamentals. It’s shorter, cheaper ($395), and open-book, but less recognized for senior roles. 

Verdict: CCSP is "better" for career advancement and salary, but CCSK is a strong starter credential. Many professionals earn both, as CCSK counts toward CCSP experience.

Global average: $114,211

  • North America: $148,009
  • Europe: $111,665
  • Asia-Pacific: $83,017

By role:

  • Cloud Architect: $169,604
  • Security Engineer: $124,820
  • Senior roles (10+ years): $200,000+

The CCSP Certified Cloud Security Professional cost is $599 (globally, except EMEA: €575; UK: £485).

Yes, for these reasons:

  • High demand: Cloud security skills gap is second only to soft skills in cybersecurity.
  • Salary boost: CCSP holders earn 20–30% more than non-certified peers.
  • Career flexibility: Validates expertise for roles like Cloud Security Architect, Consultant, or Auditor.
  • Industry recognition: Jointly developed by (ISC)² and CSA, endorsed by DoD and ISO.
  • Future-proof: Covers emerging tech like AI, zero trust, and multi-cloud security.