CCSP certified cloud security professional exam guide

Cover

Title Page

Copyright Page

Dedication

ABOUT THE AUTHOR

CONTENTS AT A GLANCE

CONTENTS

Introduction

Acknowledgments

Chapter 1 How to Obtain the CCSP and Introduction to Security

Why Get Certified?

How to Get Certified

CCSP Domains

Domain 1: Cloud Concepts, Architecture, and Design

Domain 2: Cloud Data Security

Domain 3: Cloud Platform and Infrastructure Security

Domain 4: Cloud Application Security

Domain 5: Cloud Security Operations

Domain 6: Legal, Risk, and Compliance

Introduction to IT Security

Basic Security Concepts

Risk Management

Business Continuity and Disaster Recovery

Chapter Review

Chapter 2 Cloud Concepts, Architecture, and Design

Cloud Computing Concepts

Cloud Computing Definitions

Cloud Computing Roles

Key Cloud Computing Characteristics

Building-Block Technologies

Cloud Reference Architecture

Cloud Computing Activities

Cloud Service Capabilities

Cloud Service Categories

Cloud Deployment Models

Cloud Shared Considerations

Impact of Related Technologies

Security Concepts Relevant to Cloud Computing

Cryptography

Access Control

Data and Media Sanitation

Network Security

Virtualization Security

Common Threats

Security Considerations for the Different Cloud Categories

Design Principles of Secure Cloud Computing

Cloud Secure Data Lifecycle

Cloud-Based Business Continuity/Disaster Recovery Planning

Cost-Benefit Analysis

Identify Trusted Cloud Services

Certification Against Criteria

System/Subsystem Product Certifications

Cloud Architecture Models

Sherwood Applied Business Security Architecture (SABSA)

IT Infrastructure Library (ITIL)

The Open Group Architecture Framework (TOGAF)

NIST Cloud Technology Roadmap

Exercise

Chapter Review

Questions

Questions and Answers

Chapter 3 Cloud Data Security

Describe Cloud Data Concepts

Cloud Data Lifecycle Phases

Data Dispersion

Design and Implement Cloud Data Storage Architectures

Storage Types

Threats to Storage Types

Design and Apply Data Security Strategies

Encryption

Hashing

Key Management

Tokenization

Data Loss Prevention

Data De-identification

Application of Technologies

Emerging Technologies

Implement Data Discovery

Structured Data

Unstructured Data

Implement Data Classification

Mapping

Labeling

Sensitive Data

Relevant Jurisdictional Data Protections for Personally Identifiable Information

Data Privacy Acts

Privacy Roles and Responsibilities

Implementation of Data Discovery

Classification of Discovered Sensitive Data

Mapping and Definition of Controls

Application of Defined Controls

Data Rights Management

Data Rights Objectives

Tools

Data Retention, Deletion, and Archiving Policies

Data Retention

Data Deletion

Data Archiving

Legal Hold