Certificate of Cloud Auditing Knowledge (CCAK) training course

Module 1: Introductions, course orientation and starting surveys

Multiple quizzes with instant feedback to activate your learning
Reminding you what you already know & establishing what you need to

Module 2: Cloud Security Roles and Responsibilities

Cloud reference models (NIST, CSA, Jericho, ENISA etc)
Cloud governance, legal, trust, transparency, enterprise risk management

Module 3: Cloud Security Life-Cycles

Recognising life-cycles: data, software, procurement, management, audit
Establishing life-cycle coordination spanning cloud consumers and providers

Module 4: Cloud Security Architecture

Fundamental service patterns: IaaS, PaaS, SaaS, BPaaS
Multi-tenancy, separation requirements & architectural controls

Module 5: Cloud Security Engineering

Designing, implementing & testing trusted cloud security components
Engineering cloud security solutions based on trusted components

Module 6: Cloud Standards and Controls

Reviewing the CSA’s Cloud Control Matrix (CCM) & how to harness it
Understanding the significance & benefits of CCM compliance

Module 7: Preparing for Cloud Security Audits

Considering Cloud Security Audits from a Cloud Service Provider perspective
Understanding the Cloud Service Consumer & Cloud Auditor perspectives

Module 8: CCAK Concepts and Terminology

Ensuring that CCAK acronyms and glossary terms are familiar from the outset
Using interactive quizzes to accelerate learning of core concepts

Module 9: Threat Modelling for Cloud Environments

Module 13: Reflecting on Learnings from Day 2

Articulating cloud audit benefits & aspects that could be tested in CCAK exam
Considering cloud audit challenges & how CCAK exam could test this

Module 14: Evaluating a Cloud Compliance Programme

Harnessing cloud security standards for compliance evaluation engagements
Tailoring cloud security audit evaluations to the cloud deployment model

Module 15: Continuous Cloud Assurance and Compliance

Integrating security assurance “touchpoints” through multiple life-cycles
Continuous Integration / Continuous Deployment (CI/CD) auditing