Skip to main content
Ace Skills Consulting
ISC2 logoExpert

CCSP® – Certified Cloud Security Professional

Secure cloud environments from architecture to compliance — and prepare for the ISC2 CCSP exam with vendor-neutral, practical depth.

  • 40 hours of live, domain-by-domain preparation
  • All six CCSP domains with cloud case studies
  • Vendor-neutral, with AWS, Azure and Google Cloud examples
  • Legal, risk and compliance in a cloud context
  • Practice questions with detailed discussion
Aligned to ISC2 exam CCSP
Duration
5 Days | 40 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Expert
Exam
CCSP
Language
English

Why learn CCSP with Ace Skills

  • Vendor-neutral cloud security

    Learn principles that apply across AWS, Azure, Google Cloud and SaaS providers.

  • Data protection in depth

    Master encryption, key management and data life cycle controls in the cloud.

  • Compliance made practical

    Understand jurisdiction, contracts and audits for multi-region cloud deployments.

  • Senior cloud security credential

    Prepare for a respected certification for cloud security architects and leaders.

Course overview

As more workloads move to the cloud, organisations need security professionals who understand how cloud changes architecture, data protection, operations and legal responsibilities. CCSP is ISC2’s certification for that expertise. It is vendor-neutral, so it focuses on principles that apply to any provider, and this five-day course teaches those principles with examples from the major platforms.

Day one covers cloud concepts, architecture and design: reference architectures, service and deployment models, shared responsibility and secure design principles, plus how to evaluate cloud service providers. Day two focuses on cloud data security, including the data life cycle, storage architectures, encryption and key management, data discovery and classification, rights management and data events.

Day three addresses cloud platform and infrastructure security — physical and virtual components, risk analysis, security controls, and business continuity and disaster recovery in the cloud. Day four covers cloud application security, including the secure software development life cycle, testing, supply chain and identity solutions, followed by cloud security operations such as hardening, monitoring, incident management and digital forensics.

Day five covers legal, risk and compliance: jurisdiction, privacy, audit processes, risk management and outsourcing contracts, with particular attention to data protection obligations in India and the Gulf. The course closes with exam readiness. This course is aligned to the CCSP exam and prepares you for it; certification also requires experience and endorsement, so check the current requirements on the ISC2 website.

Key features

  • Complete coverage of all six domains
  • Vendor-neutral principles with multi-cloud examples
  • Cloud data protection and key management deep dive
  • Legal and compliance discussion for India and the Gulf
  • Domain-end practice questions with discussion
  • Study plan for the weeks after the course
  • Course completion certificate from Ace Skills Consulting

Who should attend

  • Cloud security architects and engineers
  • Security managers overseeing cloud adoption
  • Enterprise architects and consultants
  • CISSP holders specialising in cloud

Prerequisites

  • Several years of IT experience including information security and cloud (ISC2 sets the exact requirement)
  • Familiarity with at least one major cloud platform

Curriculum

5 Days · 40 Hours · 15 Modules · 5 Labs

  1. Cloud concepts

    • Cloud computing roles and characteristics
    • Service and deployment models
    • Shared responsibility
    • Related technologies such as containers and AI

    Secure cloud architecture

    • Reference architectures
    • Design principles for secure cloud
    • Cryptography and key management concepts
    • Evaluating cloud service providers
    • Lab: Evaluate a cloud provider against a security requirements checklist · 40 min

    Cloud in practice

    • Comparing AWS, Azure and Google Cloud security models
    • Multi-cloud and hybrid considerations

  2. Data life cycle and storage

    • Cloud data life cycle phases
    • Storage architectures and threats
    • Data dispersion

    Protecting data

    • Encryption and key management services
    • Hashing, masking and tokenisation
    • Data loss prevention
    • Information rights management
    • Lab: Design an encryption and key management approach for a SaaS application · 45 min

    Classification and events

    • Data discovery and classification
    • Retention, deletion and archiving
    • Auditability and data events

  3. Infrastructure components

    • Physical environment and network
    • Compute, virtualisation and storage
    • Management plane security

    Risks and controls

    • Risk analysis for cloud infrastructure
    • Designing security controls
    • Identity and access for infrastructure
    • Lab: Threat model a multi-tier cloud deployment · 40 min

    Continuity and recovery

    • Business continuity and disaster recovery strategies
    • Testing recovery plans

  4. Cloud application security

    • Secure software development life cycle
    • Application security testing
    • Verified secure software and supply chain
    • Identity and access management solutions

    Security operations

    • Building and hardening infrastructure
    • Operational controls and standards
    • Security operations centre and monitoring
    • Incident management
    • Lab: Plan incident response for a cloud breach scenario · 45 min

    Forensics and communication

    • Digital forensics in the cloud
    • Communication with stakeholders

  5. Legal and privacy

    • Legal requirements and jurisdiction
    • Privacy laws and cross-border data transfer
    • eDiscovery

    Audit, risk and outsourcing

    • Audit processes in the cloud
    • Enterprise risk management
    • Contracts and service level agreements
    • Vendor management
    • Lab: Review a cloud contract for security and compliance gaps · 35 min

    Exam readiness

    • Question technique
    • Cross-domain practice set with review
    • Study plan
Download full syllabus (PDF)

Skills you will gain

  • Cloud security architecture
  • Shared responsibility
  • Cloud data security
  • Key management
  • Data classification
  • Infrastructure security
  • Cloud application security
  • Cloud security operations
  • Cloud forensics
  • Privacy and jurisdiction
  • Cloud audit
  • Vendor risk management

Tools & technologies

  • Case study workbooks
  • Practice question bank
  • AWS, Azure and Google Cloud consoles (demonstrations)
  • Threat modelling templates

Certification exam

Exam details
Exam nameCCSP – Certified Cloud Security Professional
Exam codeCCSP
Voucher includedNo — book directly with the vendor
DeliveryTest centre

Skill areas measured

  1. Cloud Concepts, Architecture and Design
  2. Cloud Data Security
  3. Cloud Platform and Infrastructure Security
  4. Cloud Application Security
  5. Cloud Security Operations
  6. Legal, Risk and Compliance

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 40 hours of live, trainer-led sessions
  • 5 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 2 · 45 min

    Design an encryption and key management approach for a SaaS application

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The ISC2 certification itself is awarded by ISC2 when you pass exam CCSP.

Frequently asked questions

Is CCSP tied to a specific cloud provider?

No. CCSP is vendor-neutral. We use examples from AWS, Azure and Google Cloud to make the principles concrete.

Do I need CISSP first?

No, but ISC2 has historically allowed CISSP holders to use it towards the experience requirement. Check the current rules on the ISC2 website.

What is the exam format?

ISC2 publishes the current number of items, duration and passing standard on its website. Please confirm these before booking, as ISC2 updates exam formats from time to time.

How long should I study after the course?

Most learners revise for six to eight weeks, focusing on weaker domains and practice questions.

Can you run this for our cloud security team?

Yes. Private batches can use your cloud platforms and compliance obligations as case material.

Related courses

Explore more

All Cybersecurity courses ISC2 certifications

CISSP and CCSP are registered marks of ISC2, Inc.

Train your team on CCSP

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.