CCSK Cert Prep: 3 Managing Cloud Security and Risk

Advance your preparation for the CCSK exam and learn the skills necessary to identify cloud-based assets and related risks.

Introduction

• Risk and security in the cloud
• What you should know

1. Managing Cloud Risk

• Identifying cloud threats
• Risk treatments and cloud shared responsibility
• Cloud Controls Matrix (CCM)
• Consensus Assessments Initiative Questionnaire (CAIQ)
• Security Trust Assurance and Risk (STAR) Registry

2. Compliance and the Cloud

• PII and PHI
• Information life cycle and governance
• Legal, regulatory, and industry standards compliance
• Data sovereignty in the cloud
• Data classification in the cloud
• Electronic discovery (e-discovery)
• Legal hold and the cloud

3. Monitoring Cloud Security

• Cloud logs
• Cloud auditing
• Cloud alerts and notifications
• Cloud compliance reports
• Cloud security recommendation tools

Conclusion

• Next steps