הסמכה // Official (ISC)2 - CCSP Bootcamp

• While numerous cloud certificates and certifications exist to show proficiency using various vendors’ cloud platforms, many only touch on information security as part of a broader cloud knowledge base, and in a theoretical way (e.g. AWS, Certified Cloud Professional, CompTIA Cloud+, Azure). The CCSP is vendor-neutral and focuses on industry best practices for securing cloud environments. It’s intended for professionals more heavily involved in cloud security via roles that are accountable for protecting enterprise architectures.
• The CCSP provides employers with a reliable indicator of candidates’ overall competency in cloud security. This ensures they put the right people in place who can leverage the benefits of cloud computing and possess the knowledge, skills and abilities needed to address the security and business issues associated with the complexities of cloud computing. The CCSP simplifies and improves the hiring process for both public and private sector organizations.

• Not all (ISC)² certification trainings are endorsed by (ISC)². Only with Official Training are you guaranteed the most relevant, up-to-date courseware developed by (ISC)² and delivered by an (ISC)² Authorized Instructor.
• (ISC)² exam vouchers are available for bulk purchase. Unauthorized companies do not have the access required to purchase (ISC)² exam vouchers. CCSP Battlecard For Internal Use Only – Confidential 7
• No training provider can guarantee you a pass rate. Be wary of any outlets advertising “90% pass rates.”
• Your team will only learn the latest content through official channels. As trends in cybersecurity evolve, the official (ISC)² certification Common Body of Knowledge (CBK) and courseware are updated accordingly. We guarantee our training material is always current with the latest CBK version, which is also the source for exam material.
• Quality instruction matters. Make sure your training provider offers qualified, authorized (ISC)² instructors. All of our instructors hold the certification they are teaching and undergo a rigorous onboarding process. No instructor can claim they “teach the exam,” and are prohibited from participating in Exam Item Writing. Beware of any training provider claiming to “teach the exam.”
• Passing the exam is not the only thing that matters. We help candidates prepare for their test day, but we never lose sight of the bigger picture: inspiring a safe and secure cyber world and developing professionals who can better secure your organization.
• With Official Training, you set your team up for success while maximizing ROI. We offer formats to match your budget, location, schedule and preferred learning style.
• Our Official@Work program lets your organization develop its own instructors to train your workforce while enjoying the benefits of our official curriculum materials.
• Our Investment Program provides matching funds for your organization for every dollar you spend with us and also allows you to park end-of-year training budget and use in the following year (up to 30% of your training investment). You can also use Investment Program funds for AMF and Exam Voucher purchases in addition to training.
• The Official (ISC)² CBK Training Seminar for the CISSP, CCSP, CSSLP and SSCP is worth 2 hours of lower-division college credit hours per the American Council on Education’s College Credit Recommendation Service (ACE CREDIT).

• Ranked #1 on The Next Big Thing list as the certification survey respondents plan to earn in 2021, 2019, 2018, 2017 and 2016 – Certification Magazine
• Ranked #8 on the Certification Salary Survey 75 list with an annual salary of $150,400 (in U.S.), $119,880 (globally) in 2021
• Certification Magazine calls the CCSP “the most well-rounded certification by far for the cloud protection area.”
• CCSP listed as the second most popular IT security cert respondents plan to obtain in the next 12 months – 2018 Spiceworks Report
• Named the #1 could computing certification for 2017 – Cloud Computing Intelligence
• Named one of the Top 5 Vendor-Neutral Cloud Security Certifications of 2017 – Tripwire
• Named one of 8 Valuable Security Certifications for 2017 – Dark Reading
• Named one of the Top 5 IT Security Certifications to Target in 2016 – Firebrand Training
• Applauded as a new benchmark for cloud security knowledge and competence by Kevin Jackson, CEO of GovCloud Network

After completing this course, the student will be able to:

• Describe the physical and virtual components of and identify the principle technologies of cloud based systems
• Define the roles and responsibilities of customers, providers, partners, brokers and the various technical professionals that support cloud computing environments
• Identify and explain the five characteristics required to satisfy the NIST definition of cloud computing
• Differentiate between various as a Service delivery models and frameworks that are incorporated into the cloud computing reference architecture
• Discuss strategies for safeguarding data, classifying data, ensuring privacy, assuring compliance with regulatory agencies and working with authorities during legal investigations
• Contrast between forensic analysis in corporate data center and cloud computing environments
• Evaluate and implement the security controls necessary to ensure confidentiality, integrity and availability in cloud computing
• Identify and explain the six phases of the data lifecycle
• Explain strategies for protecting data at rest and data in motion
• Describe the role of encryption in protecting data and specific strategies for key management
• Compare a variety of cloud-based business continuity / disaster recovery strategies and select an appropriate solution to specific business requirements
• Contrast security aspects of Software Development Lifecycle (SDLC) in standard data center and cloud computing environments
• Describe how federated identity and access management solutions mitigate risks in cloud computing systems
• Conduct gap analysis between baseline and industry-standard best practices
• Develop Service Level Agreements (SLAs) for cloud computing environments
• Conduct risk assessments of existing and proposed cloud-based environments
• State the professional and ethical standards of (ISC)² and the Certified Cloud Security Professional