Certified Cloud Security Professional (CCSP)

Domain 1- Cloud Concepts, Architecture and Design

1.1 Understand cloud computing concepts
1.2 Describe cloud reference architecture
1.3 Understand security concepts relevant to cloud computing
1.4 Understand design principles of secure cloud computing
1.5 Evaluate cloud service providers

Domain 2- Cloud Data Security

2.1 Describe cloud data concepts
2.2 Design and implement cloud data storage architectures
2.3 Design and apply data security technologies and strategies
2.4 Implement data discovery
2.5 Plan and implement data classification
2.6 Design and implement Information Rights Management (IRM)
2.7 Plan and implement data retention, deletion and archiving policies
2.8 Design and implement auditability, traceability and accountability of data events

Domain 3- Cloud Platform and Infrastructure Security

3.1 Comprehend cloud infrastructure and platform components
3.2 Design a secure data center
3.3 Analyze risks associated with cloud infrastructure and platforms
3.4 Plan and implementation of security controls
3.5 Plan business continuity (BC) and disaster recovery (DR)

Domain 4-Cloud Application Security

4.1 Advocate training and awareness for application security
4.2 Describe the Secure Software Development Life Cycle (SDLC) process
4.3 Apply the Secure Software Development Life Cycle (SDLC)
4.4 Apply cloud software assurance and validation
4.5 Use verified secure software
4.6 Comprehend the specifics of cloud application architecture
4.7 Design appropriate identity and access management (IAM) solutions