Complete Cloud Security Professional Training Course

Develop advanced cloud security architecture, data governance, platform defense, and risk management capabilities across multi-cloud environments.
Complete Cloud Security Professional Training Course

At a glance

Duration
1 Week
Format
Classroom
Cities
Chicago, Trabzon, Dubai, Accra, Seoul, New York and more
Next session
18 – 22 October 2026, Chicago
Average fee
5,800 €

Overview

This Complete Cloud Security Professional course prepares candidates for the CCSP (Certified Cloud Security Professional) credential from ISC2, which is vendor-neutral: it tests how a seasoned practitioner reasons about any provider's offering rather than how to click through one console. Over one week it walks through the six domains of the CCSP Common Body of Knowledge in order, and teaches each through choices a cloud security manager actually signs: whether a workload is portable enough to leave a provider, which obfuscation method suits a dataset, what a provider's SOC 2 Type II exceptions really mean, which clauses to insist on before signing, and how to answer a litigation hold. Every domain closes with exam-style questions and a debrief on why the distractors are wrong. This course is delivered by Agile Leaders Training Center.

Who Should Attend

  • Practitioners with several years in IT and information security planning to sit the CCSP exam
  • CISSP holders adding a cloud-specific credential
  • Enterprise architects who approve designs spanning more than one provider
  • Third-party and supplier assurance managers vetting cloud vendors
  • Auditors, privacy officers and legal counsel reviewing cloud agreements

Departments and Industries

Suited to teams that must judge providers they do not run themselves.

  • Supplier assurance teams in banking and insurance
  • Architecture review boards in SaaS businesses
  • Records management and privacy offices in hospitals
  • Legal and purchasing teams drafting hosting agreements
  • Government shared-services and digital units

Learning Objectives

By the end of this course, participants will be able to:

  • Use the NIST SP 800-145 and ISO/IEC 17788 definitions to describe any offering and the roles of customer, provider, partner and broker.
  • Evaluate interoperability, portability and reversibility before a workload is moved.
  • Compare tokenisation, masking, anonymisation and crypto-shredding for a given dataset.
  • Analyse risks specific to Type 1 and Type 2 hypervisors, sandboxing and application virtualisation.
  • Apply STRIDE, SAST, DAST and OWASP ASVS checks within a cloud software lifecycle.
  • Evaluate SOC 1, SOC 2 and CSA STAR evidence and negotiate right-to-audit, breach-notice and exit terms.

Course Agenda

Day 1: Domain 1 - Concepts, Reference Architecture and Design

  • CCSP exam structure, ISC2 experience rules and a study plan
  • NIST SP 800-145 and ISO/IEC 17788 vocabulary; roles of customer, provider, partner, broker, auditor and regulator
  • Cross-cutting aspects: interoperability, portability, reversibility and availability
  • Business impact analysis and the cost case for migration
  • Evaluating a provider through Common Criteria and FIPS 140 validations

Day 2: Domain 2 - Protecting Data Held by a Provider

  • Create, store, use, share, archive, destroy: the CCSP secure data lifecycle
  • Raw, volume, object, structured and unstructured storage per service model
  • Tokenisation, masking, anonymisation and key escrow compared
  • Information rights management and data discovery
  • Retention schedules, litigation hold and crypto-shredding, with an exam-style question set and debrief

Day 3: Domains 3 and 4 - Provider Platforms and Cloud Applications

  • Type 1 versus Type 2 hypervisors, guest escape and tenant separation
  • Provider data centre siting, power, cooling, redundancy tiers and recovery objectives across regions
  • The cloud software lifecycle and the OWASP Top 10 in a cloud context
  • STRIDE threat modelling, SAST, DAST and OWASP ASVS
  • Sandboxing, application virtualisation and API gateways

Day 4: Domain 5 - Running Security Day to Day

  • Building and securing the logical environment inside a tenant
  • ITIL change, configuration, capacity and problem management
  • Security operations visibility when telemetry belongs to the provider
  • Evidence collection and chain of custody under ISO/IEC 27037
  • Communicating with vendors, customers and regulators during an event, with an exam-style question set and debrief

Day 5: Domain 6 - Legal, Risk and Compliance, and Mock Exam

  • Conflicting jurisdictions, data sovereignty and eDiscovery under ISO/IEC 27050; privacy principles and ISO/IEC 27018
  • SOC 1, SOC 2 Type I and Type II, and the CSA STAR registry
  • Hosting agreement clauses: right to audit, breach notice, exit and data return
  • Enterprise risk appetite and residual risk when outsourcing to a provider
  • Full-length timed mock exam and domain-by-domain score review

Practical Exercises

These suggested case activities put the CCSP domains to work on decisions a cloud security manager signs off.

  • Suggested activity: decide whether an HR system can leave its current provider, scoring portability and reversibility.
  • Suggested activity: pick an obfuscation method for each column of a patient table.
  • Suggested activity: read a SOC 2 Type II extract and list the exceptions that matter to your organisation.
  • Suggested activity: redline a hosting agreement for audit rights, breach notice and exit.

FAQs

What background is recommended?

Several years in IT including time in information security. ISC2 sets its own experience rules for the credential; candidates should confirm them before booking the exam.

Is the course tied to one provider?

No. Like the CCSP exam it is vendor-neutral; provider names appear only as examples.

How does this differ from a hands-on engineering course?

It trains judgement across providers: contracts, assurance evidence, data decisions and risk, rather than configuring a single platform.

Conclusion

Participants finish having covered all six CCSP domains, a timed mock exam and several contract and assurance cases drawn from real provider decisions, with a personal list of weak areas to revise and a clearer way of judging any cloud provider's evidence, contracts and data controls before sitting the ISC2 exam.

credits: 5 credit per day

Course Mode: full-time

Provider: Agile Leaders Training Center

Showing 1-20 of 74 events
Image Location Dates Duration Mode Price Actions
Chicago Chicago Week 42, 2026
18 – 22 October 2026
1 Week Onsite €12,000
Trabzon Trabzon Week 43, 2026
25 – 29 October 2026
1 Week Onsite €6,800
Dubai Dubai Week 44, 2026
26 – 30 October 2026
1 Week Onsite €4,500
Accra Accra Week 44, 2026
1 – 5 November 2026
1 Week Onsite €4,100
Seoul Seoul Week 45, 2026
2 – 6 November 2026
1 Week Onsite €10,000
New York New York Week 45, 2026
2 – 6 November 2026
1 Week Onsite €12,000
Phuket Phuket Week 46, 2026
15 – 19 November 2026
1 Week Onsite €6,000
Munich Munich Week 47, 2026
16 – 20 November 2026
1 Week Onsite €5,700
Toronto Toronto Week 47, 2026
22 – 26 November 2026
1 Week Onsite €12,000
Jakarta Jakarta Week 48, 2026
23 – 27 November 2026
1 Week Onsite €5,700
Muscat Muscat Week 48, 2026
29 November – 3 December 2026
1 Week Onsite €5,700
Abu Dhabi Abu Dhabi Week 50, 2026
7 – 11 December 2026
1 Week Onsite €4,700
Lisbon Lisbon Week 50, 2026
7 – 11 December 2026
1 Week Onsite €5,700
Tashkent Tashkent Week 50, 2026
13 – 17 December 2026
1 Week Onsite €4,500
London London Week 51, 2026
14 – 18 December 2026
1 Week Onsite €5,700
Langkawi Langkawi Week 51, 2026
20 – 24 December 2026
1 Week Onsite €6,000
Porto Porto Week 52, 2026
21 – 25 December 2026
1 Week Onsite €5,700
Cape town Cape town Week 52, 2026
27 – 31 December 2026
1 Week Onsite €4,500
Milan Milan Week 01, 2027
4 – 8 January 2027
1 Week Onsite €5,700
Kuala Lumpur Kuala Lumpur Week 02, 2027
11 – 15 January 2027
1 Week Onsite €5,200

Frequently asked questions

What does this course cover?

OverviewThis Complete Cloud Security Professional course prepares candidates for the CCSP (Certified Cloud Security Professional) credential from ISC2, which is vendor-neutral: it tests how a seasoned practitioner reasons about any provider's offering rather than how to click through one console. Over one week it walks through the six domains of the CCSP…

Are training dates available?

Yes. Available dates and destinations are listed in the course dates section on this page.

How can I register?

Choose an available date on this page and complete the registration form, or send a programme enquiry.

Can I download the course brochure?

Yes. Use the brochure download link provided on this page.

This course by city