CCSP Training — Certified Cloud Security Professional

The CCSP (Certified Cloud Security Professional) is the world’s leading certification for cloud security professionals. Co-developed by ISC² and the Cloud Security Alliance (CSA), it addresses the massive migration of organisations to the cloud and the new cybersecurity challenges it creates.

The CCSP certification demonstrates your in-depth mastery of cloud security concepts, architectures, controls and best practices for IaaS, PaaS and SaaS platforms — whether public (AWS, Azure, GCP), private or hybrid cloud.

Why obtain the CCSP certification?

The cloud market in Tunisia and North Africa is experiencing accelerated growth. Banks, telecoms operators, public administrations and companies of all sizes are progressively migrating to cloud environments. This transformation generates strong demand for professionals capable of securing these complex, multi-vendor environments.

The CCSP certification will enable you to:

•  Design and secure multi-tenant and hybrid cloud architectures
• Implement security controls for each cloud service model (IaaS, PaaS, SaaS)
• Manage regulatory compliance in the cloud (GDPR, PCI DSS, SOC 2, ISO 27017)
• Oversee data security in the cloud (encryption, DLP, identity management)
• Lead incident response in distributed cloud environments
• Access Cloud Security Architect, Cloud CISO, Cloud Security Consultant roles

Target Audience

• Cloud architects and engineers  wishing to add security expertise to their profile
• CISOs and security managers overseeing cloud environments
• IT auditors and cybersecurity consultants working on cloud projects
• System and network administrators managing cloud infrastructure
• CISSP-certified professionals seeking to deepen their cloud expertise

ISC² CCSP Eligibility Requirements: 5 years of cumulative information security experience, including at least 3 years in one of the 6 CCSP domains. CISSP holders may be exempt from the experience requirement.

CCSP Training Programme — The 6 Domains

Domain 1 — Cloud Concepts, Architecture and Design (17%)

• Essential cloud computing characteristics (NIST SP 800-145)
• Service models: IaaS, PaaS, SaaS — shared responsibility
• Deployment models: public, private, community, hybrid
• Cloud security frameworks: CSA CCM, ISO 27017, ISO 27018
• Cloud security architecture: zero trust, SASE, CSPM

Domain 2 — Cloud Data Security (19%)

• Data lifecycle in the cloud: create, store, use, share, archive, destroy
• Data protection technologies: encryption, tokenisation, masking
• Cloud cryptographic key management (KMS, HSM)
• DLP and data classification
• Digital rights and data access controls

Domain 3 — Cloud Platform and Infrastructure Security (17%)

• Hypervisor and virtualisation security
• Cloud network security: VPC, micro-segmentation, WAF, cloud SIEM
• Cloud identity and access management (IAM): RBAC, MFA, PAM
• Container and Kubernetes security
• Serverless function and microservices security

Domain 4 — Cloud Application Security (13%)

• Security in the DevSecOps lifecycle
  – Cloud application security testing: SAST, DAST, SCA
• API and microservices management
• CI/CD pipeline security
• Application security standards: OWASP Top 10 Cloud

Domain 5 — Cloud Security Operations (17%)

• Cloud incident management: detection, investigation, response
• Forensic analysis in cloud environments
• Business continuity and disaster recovery in the cloud
• Cloud vulnerability and patch management
• Security monitoring: SIEM, SOAR, cloud threat intelligence

Domain 6 — Legal, Risk and Compliance (17%)

• Regulatory frameworks applicable to cloud: GDPR, NIS2, PCI DSS, SOC 2
• Cloud risk management: identification, assessment, treatment
• Cloud contracts and security clauses: SLA, DPA, standard contractual clauses
• Cloud provider audit and certification: ISO 27001, SOC 2, FedRAMP
• Ethics and accountability in cloud usage