Certified Cloud Security Engineer [EC-CCSE]

OVERVIEW

Cloud technology has transformed the technology landscape and will continue to do so for years to come. EC-Council’s Certified Cloud Security Engineer (CCSE) is a vendor-neutral course that focuses on cloud security practices, technologies, frameworks, and principles to deliver a well-balanced mix of the theoretical and practical skills you need to become a cloud security expert.

CCSE was created with cloud security job roles in mind and is designed to help you meet the challenges of tomorrow. As cloud technology evolves, you should too – come learn the skills you need now to defend the technology of tomorrow.

OBJECTIVES

• Plan, implement, and execute cloud platform security for an organization.
• Securely access cloud resources through identity and access management (IAM).
• Evaluate and control organizational cloud network architecture by integrating various security controls the service provider offers.
• Evaluate cloud storage techniques and threats on data stored in the cloud and understand how to protect cloud data from attacks.
• Implement and manage cloud security on various cloud platforms, such as AWS, Azure, and GCP.
• Understand the shared responsibility model of the service provider.
• Evaluate various cloud security standards, compliance programs, and features offered by AWS, Azure, and GCP, and perform cloud computing security audits.
• Implement various threat detection and response services provided by Azure, AWS, and GCP to identify threats to an organization’s cloud services.
• Evaluate and mitigate security risks, threats, and vulnerabilities in a cloud platform.
• Integrate best practices to secure cloud infrastructure components (network, storage and virtualization, and management).
• Secure organizational cloud applications by understanding the secure software development lifecycle of cloud applications and by implementing additional security controls to enhance the security of hosted cloud applications.
• Design and implement a GRC framework, a cloud incident response plan, and a business continuity plan for cloud services.
• Utilize the security services and tools provided in Azure, AWS, and GCP to secure the organizational cloud environment.
• Understand the legal implications associated with cloud computing to protect organizations.
• Implement operational controls and standards to build, operate, manage, and maintain the cloud infrastructure.
• Understand and implement security for private, multi-tenant, and hybrid cloud environments.

CONTENT

Module 01: Introduction to Cloud Security

Module 02: Platform and Infrastructure Security in the Cloud

Module 03: Application Security in the Cloud

Module 04: Data Security in the Cloud

Module 05: Operation Security in the Cloud

Module 06: Penetration Testing in the Cloud

Module 07: Incident Detection and Response in the Cloud

Module 08: Forensics Investigation in the Cloud

Module 09: Business Continuity and Disaster Recovery in the Cloud

Module 10: Governance, Risk Management, and Compliance in the Cloud

Module 11: Standards, Policies, and Legal Issues in the Cloud

Appendix (Self-Study): Private, Hybrid, and Multi-Tenant Cloud Security