Cloud Security Training in Transylvania

Description:

The CCSK Plus program, spanning two days, encompasses all material from the CCSK Foundation course and enhances it with extensive, hands-on laboratory sessions during the second day. Participants will apply their learning through a series of exercises centered on a scenario that securely transitions a fictional organization to the cloud. Upon completion, students will be thoroughly prepared for the CCSK certification exam, which is sponsored by the Cloud Security Alliance. While the second day includes additional lectures, the majority of time is dedicated to assessing, building, and securing cloud infrastructure through practical exercises.

Objectives:

This two-day course starts with CCSK Basic training, followed by a second day featuring supplementary content and practical activities.

Target Audience:

Although designed for security professionals, this course is also highly beneficial for anyone seeking to deepen their understanding of cloud security.

Adopting cloud technologies transforms the way applications are constructed, deployed, and maintained. This shift alters the division of security responsibilities between service providers and clients, while introducing cloud-native architectures—such as containers, serverless computing, and managed services—that demand tailored security measures. Consequently, effective security strategies must encompass infrastructure hardening, identity and access management, data protection, secure development methodologies, and the mitigation of cloud-specific threats.

This instructor-led, live training (available online or onsite) is designed for intermediate-level developers, security engineers, and IT managers seeking to acquire practical, hands-on skills for securing cloud applications and their underlying infrastructure. Participants will learn to implement repeatable controls and assessment techniques aligned with current industry frameworks and cloud provider guidelines.

Upon completion of this training, participants will be able to:

• Articulate the cloud shared-responsibility model and apply it to application security decisions.
• Harden cloud infrastructure (IaaS), secure platform services (PaaS), and evaluate SaaS configurations.
• Apply secure coding standards and OWASP-based mitigation patterns to applications hosted in the cloud.
• Integrate security tooling into CI/CD pipelines (including SAST, DAST, IAST, and RASP) and adopt shift-left security practices.

Course Format

• Interactive lectures and discussions supported by live demonstrations.
• Hands-on labs utilizing cloud consoles, containers, serverless functions, and CI/CD pipelines.
• Practical exercises covering secure configuration, vulnerability scanning, attack simulation, and remediation planning.

Customization Options

• To request a customized training session for this course, please contact us to arrange your needs.

This course delivers practical expertise in OpenStack and private cloud security. It begins with an introduction to the system, after which participants gain hands-on knowledge regarding security within private clouds and the process of securing an OpenStack installation. Throughout the training, each core OpenStack module is explored in detail. Participants build virtual resources for identity, images, networking, compute, and storage, while simultaneously addressing pertinent security issues. Every participant receives a dedicated training environment featuring a complete OpenStack installation tailored to a selected cloud architecture (e.g., storage, networking). The training is highly customizable to meet specific client requirements.

Customization options
The course can be condensed into a 2-day format, focusing on the core aspects most relevant to the customer. Additionally, the training can be expanded to cover administrative, design, networking, and/or troubleshooting topics related to OpenStack deployments.