EC-Council: Certified Cloud Security Engineer (CCSE) Certification Training

Cloud Security Introduction

• Understanding the core concepts of cloud computing, cloud service models, and cloud-based threats/vulnerabilities. 
• Service provider components (evaluation and the shared security responsibility model) for configuring a secure cloud environment and protecting organizational resources.

Platform & Infrastructure Security in the Cloud

• Exploring the key components and technologies that form a cloud architecture.
• Securing multi-tenant, virtualized, physical, and logical cloud components. 
• Utilizing configurations and best practices for securing physical data centers and cloud infrastructures using tools/techniques provided by Azure, AWS, and GCP. 

Application Security in the Cloud

• Securing cloud applications.
• Explaining secure software development lifecycle changes. 
• Multiple services/tools for application security in Azure, AWS, and GCP.  

Data Security in the Cloud

• Covering the basics of cloud data storage, its lifecycle, and various controls.
• Protecting data-at-rest and data-in-transit in the cloud. 
• Addressing data storage features.
• Multiple services/tools for securing data stored in Azure, AWS, and GCP.

Operation Security in the Cloud

• Learning security controls for building, implementing, operating, managing, and maintaining physical/logical infrastructures for cloud environments. 
• The required services, features, and tools for operational security provided by AWS, Azure, and GCP.

Penetration Testing in the Cloud

• Implementing comprehensive penetration testing.
• Assessing the security of an organization's cloud infrastructure.
• Reviewing the services/tools for performing penetration testing in AWS, Azure, and GCP.

Incident Detection & Response in the Cloud

• Learning incident response (IR) and the IR lifecycle.
• The tools/techniques for identifying/responding to incidents.
• How to use SOAR technologies.
• IR capabilities provided by AWS, Azure, and GCP.

Forensics Investigation in the Cloud

• Understanding the forensic investigation process in cloud computing.
• Cloud forensic challenges and data collection methods. 
• Investigating security incidents using AWS, Azure, and GCP tools.

Business Continuity & Disaster Recovery in the Cloud

• Analyzing the importance of business continuity and disaster recovery planning in IR. 
• Exploring backup/recovery tools, services, and features provided by AWS, Azure, and GCP for monitoring business continuity issues.

Governance, Risk Management & Compliance in the Cloud

• Focusing on governance frameworks, models, and regulations (ISO/IEC 27017, HIPAA, and PCI DSS).
• Designing and implementing governance frameworks in the cloud.
• Addressing cloud compliance frameworks and elaborating on AWS, Azure, and GCP governance modules.

Standards, Policies & Legal Issues in the Cloud

• Discussing standards, policies, and legal issues associated with the cloud. 
• The features, services, and tools for compliance/auditing in AWS, Azure, and GCP.

Private, Hybrid & Multi-Tenant Cloud Security

• Covering the security of private, hybrid, and multi-tenant cloud models.  
• Some of the best practices for securing VMWare Cloud, AWS, GCP, Azure hybrid cloud setups, and multi-tenant clouds.