Cloud Security Training in the UAE

Description:

The 2-day CCSK Plus course encompasses all the material from the CCSK Foundation program and extends it with extensive hands-on labs on the second day. Participants will gain practical experience by completing a series of exercises that involve securing a fictional organization's move to the cloud. Upon completion, attendees will be well-prepared for the CCSK certification exam, supported by Cloud Security Alliance. The second day includes additional lectures, but most of the time is dedicated to evaluating, constructing, and safeguarding a cloud infrastructure through various activities.

Objectives:

This two-day course starts with CCSK Basic training and continues with supplementary content and practical sessions on the following day.

Target Audience:

This program is designed for security professionals, but it also benefits anyone interested in enhancing their understanding of cloud security.

CCSP is a global credential born from the expertise of the two industry-leading stewards of information systems and cloud computing security, (ISC)² and CSA. The CCSP credential is appropriate and applicable to cloud security in a global environment. This is especially important given the legal, regulatory and compliance concerns that come with multi-jurisdictional housing of personally identifiable information (PII).

For those who qualify, the CCSP exam will test their competence in the six CCSP domains of the (ISC)² Common Body of Knowledge (CBK), which cover:

• Architectural Concepts & Design Requirements
• Cloud Data Security
• Cloud Platform & Infrastructure Security
• Cloud Application Security
• Operations
• Legal & Compliance

Moving to the cloud offers significant advantages in terms of efficiency and cost savings for businesses and individuals alike. Regarding security, its impact is varied, but there's a general belief that cloud services enhance security. However, opinions often differ on who should be responsible for securing cloud resources.

This course covers IaaS, PaaS, and SaaS by first addressing infrastructure security, including hardening and configuration issues, as well as authentication, authorization, and identity management solutions—core elements of any secure architecture. It also delves into legal and contractual aspects, such as establishing and managing trust in the cloud.

The course then explores specific threats to the cloud environment, the objectives and motivations of attackers, and common attack methods against cloud services. Special attention is given to auditing cloud systems and evaluating their security across all levels, including penetration testing and vulnerability assessments.

A key focus is on application security, addressing both data protection and the security of applications themselves. While cloud computing security shares similarities with general software security—meaning that most OWASP-listed vulnerabilities are relevant—the specific threats and risks differ. The course concludes by detailing various cloud-specific attack vectors related to previously discussed weaknesses.

Participants in this course will

• Grasp fundamental concepts of security, IT security, and secure coding practices
• Identify major threats and risks associated with the cloud environment
• Become familiar with basic cloud security solutions
• Gain insight into trust and governance in the cloud
• Develop a practical understanding of cryptography
• Aquire comprehensive knowledge on application security within the cloud
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand the challenges involved in auditing and evaluating cloud systems for security
• Master techniques for securing the cloud environment and infrastructure
• Receive resources and further reading materials on secure coding practices

Audience

Developers, Managers, Professionals

This course will equip you to implement appropriate security controls in the cloud, often using automation to "inspect what you expect." We will begin by diving headfirst into one of the most crucial aspects of cloud - Identity and Access Management (IAM). From there, we'll move on to securing the cloud through discussion and practical, hands-on exercises related to several key topics to defend various cloud workloads operating in the different CSP models of: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), and Functions as a Service (FaaS).

This course offers practical insights into OpenStack and private cloud security. It begins with an introduction to the system, followed by hands-on learning on securing private clouds and OpenStack installations. Throughout the course, participants will explore each core module of OpenStack while creating virtual identity, image, network, compute, and storage resources. Simultaneously, they will delve into pertinent security issues. Each participant receives a personalized training environment with a fully installed OpenStack based on chosen cloud architecture (e.g., storage, networking). The course can be tailored to meet the specific requirements of the client.

Customization Options
The training can be condensed to two days, concentrating on key aspects pertinent to the customer. It can also be extended to cover additional topics such as administrative tasks, design considerations, networking, and troubleshooting related to OpenStack deployments.