Cloud Security Training in South Africa

Description:

This 2-day CCSK Plus programme encompasses all material from the CCSK Foundation course, extending it with extensive practical labs on the second day. Participants will apply their learning through a series of exercises based on a scenario that securely integrates a fictional organisation into the cloud. Upon completion, students will be well-prepared for the CCSK certification exam, sponsored by the Cloud Security Alliance. While this second day includes additional lectures, the majority of the time is dedicated to assessing, building, and securing cloud infrastructure during practical sessions.

Objectives:

This is a two-day class that begins with the CCSK- Basic training, followed by a second day of additional content and hands-on activities

Target Audience:

This class is geared towards security professionals, but is also useful for anyone looking to expand their knowledge of cloud security.

CCSP is a globally recognised credential derived from the expertise of two industry-leading stewards of information systems and cloud computing security: (ISC)² and CSA. The CCSP credential is highly relevant and applicable to cloud security within a global context. This is especially critical given the legal, regulatory, and compliance challenges associated with the multi-jurisdictional storage of personally identifiable information (PII).

For eligible candidates, the CCSP exam assesses competence across the six CCSP domains of the (ISC)² Common Body of Knowledge (CBK), covering:

• Architectural Concepts & Design Requirements
• Cloud Data Security
• Cloud Platform & Infrastructure Security
• Cloud Application Security
• Operations
• Legal & Compliance

The shift to cloud environments creates a unique challenge for financial institutions: while it delivers exceptional agility, it also introduces intricate security complexities that traditional audit approaches often struggle to address. Equipping IT Auditors with specialized cloud security expertise is not merely an operational objective—it is a fundamental fiduciary duty.

This programme is carefully crafted to evolve your audit team into a proactive line of defence. By the conclusion of this session, participants will transition from theoretical knowledge to practical proficiency, ensuring that the bank’s cloud infrastructure is robust against contemporary threats and fully aligned with the stringent standards of the financial sector.

This course will equip you to implement appropriate security controls in the cloud, often using automation to 'inspect what you expect'. We will begin by diving headfirst into one of the most crucial aspects of cloud infrastructure—Identity and Access Management (IAM). From there, we will move on to securing the cloud through discussion and practical, hands-on exercises related to several key topics aimed at defending various cloud workloads operating across different CSP models: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), and Functions as a Service (FaaS).