Cloud Security Training in Cordoba

Description:

The CCSK Plus course, spanning two days, encompasses all material from the CCSK Foundation curriculum and enhances it with comprehensive, hands-on labs on the second day. Participants will apply their learning through exercises centered around a scenario that securely transitions a fictional organization to the cloud. Upon completion, students will be thoroughly prepared for the CCSK certification exam, which is sponsored by the Cloud Security Alliance. While the second day includes additional lectures, the majority of the time is dedicated to assessing, constructing, and securing cloud infrastructure during practical exercises.

Objectives:

This two-day program begins with CCSK Basic training, followed by a second day featuring extended content and practical activities.

Target Audience:

The course is primarily designed for security professionals but is also beneficial for anyone seeking to broaden their understanding of cloud security.

The shift to cloud computing transforms how applications are developed, deployed, and managed, reallocating responsibilities between providers and customers. This evolution introduces cloud-native platforms—such as containers, serverless architectures, and managed services—which necessitate adapted security controls. Consequently, security strategies must encompass infrastructure hardening, identity and access management, data protection, secure development methodologies, and the mitigation of cloud-specific threats.

This instructor-led training, available online or onsite, is designed for intermediate developers, security engineers, and IT managers seeking practical, hands-on experience in securing cloud applications and their underlying infrastructure. Participants will learn repeatable controls and assessment techniques aligned with current industry frameworks and cloud provider guidelines.

Upon completion, participants will be able to:

• Articulate the cloud shared-responsibility model and apply it to application security decisions.
• Harden cloud infrastructure (IaaS), secure platform services (PaaS), and evaluate SaaS configurations.
• Implement secure coding practices and OWASP-based mitigation patterns for cloud-hosted applications.
• Integrate security tooling into CI/CD pipelines (including SAST, DAST, IAST, and RASP) and adopt shift-left practices.

Course Format

• Interactive lectures and discussions supported by live demonstrations.
• Hands-on labs utilizing cloud consoles, containers, serverless functions, and CI/CD pipelines.
• Practical exercises focused on secure configuration, vulnerability scanning, attack simulation, and remediation planning.

Customization Options

• For customized training on this course, please contact us to arrange.

For financial institutions, migrating to cloud environments creates a paradox: while it delivers unmatched agility, it also introduces intricate security challenges that conventional audit approaches cannot effectively address. Equipping IT Auditors with specialized cloud security expertise is not merely an operational target—it is a fundamental fiduciary duty.

This program is carefully crafted to evolve your audit team into a proactive defense mechanism. By the conclusion of the session, participants will transition from theoretical knowledge to practical expertise, ensuring the bank’s cloud infrastructure is resilient against contemporary threats and fully compliant with the stringent standards of the financial industry.

This course delivers hands-on expertise in OpenStack and private cloud security. It begins with an introduction to the system, followed by practical guidance on securing private clouds and hardening OpenStack installations. Throughout the training, each core OpenStack module is explored; participants actively construct virtual identity, image, network, compute, and storage resources while addressing key security considerations. Every participant receives a dedicated training environment featuring a fully deployed OpenStack setup tailored to a specific cloud architecture (such as storage or networking). The program can be highly customized to meet individual client requirements.

Customization options
The training duration can be condensed to two days, focusing on the core aspects most relevant to the customer. Alternatively, the scope can be expanded to cover administrative tasks, design principles, networking, and/or troubleshooting topics pertinent to OpenStack deployments.