Complete Cloud Security Professional Training Course

Develop advanced cloud security architecture, data governance, platform defense, and risk management capabilities across multi-cloud environments.
Complete Cloud Security Professional Training Course

At a glance

Duration
1 Week
Format
Classroom
Cities
Chicago, Trabzon, Dubai, Accra, Seoul, New York and more
Next session
18 – 22 October 2026, Chicago
Average fee
5,800 €

Overview

This Complete Cloud Security Professional course prepares candidates for the CCSP (Certified Cloud Security Professional) credential from ISC2, which is vendor-neutral: it tests how a seasoned practitioner reasons about any provider's offering rather than how to click through one console. Over one week it walks through the six domains of the CCSP Common Body of Knowledge in order, and teaches each through choices a cloud security manager actually signs: whether a workload is portable enough to leave a provider, which obfuscation method suits a dataset, what a provider's SOC 2 Type II exceptions really mean, which clauses to insist on before signing, and how to answer a litigation hold. Every domain closes with exam-style questions and a debrief on why the distractors are wrong. This course is delivered by Agile Leaders Training Center.

Who Should Attend

  • Practitioners with several years in IT and information security planning to sit the CCSP exam
  • CISSP holders adding a cloud-specific credential
  • Enterprise architects who approve designs spanning more than one provider
  • Third-party and supplier assurance managers vetting cloud vendors
  • Auditors, privacy officers and legal counsel reviewing cloud agreements

Departments and Industries

Suited to teams that must judge providers they do not run themselves.

  • Supplier assurance teams in banking and insurance
  • Architecture review boards in SaaS businesses
  • Records management and privacy offices in hospitals
  • Legal and purchasing teams drafting hosting agreements
  • Government shared-services and digital units

Learning Objectives

By the end of this course, participants will be able to:

  • Use the NIST SP 800-145 and ISO/IEC 17788 definitions to describe any offering and the roles of customer, provider, partner and broker.
  • Evaluate interoperability, portability and reversibility before a workload is moved.
  • Compare tokenisation, masking, anonymisation and crypto-shredding for a given dataset.
  • Analyse risks specific to Type 1 and Type 2 hypervisors, sandboxing and application virtualisation.
  • Apply STRIDE, SAST, DAST and OWASP ASVS checks within a cloud software lifecycle.
  • Evaluate SOC 1, SOC 2 and CSA STAR evidence and negotiate right-to-audit, breach-notice and exit terms.

Course Agenda

Day 1: Domain 1 - Concepts, Reference Architecture and Design

  • CCSP exam structure, ISC2 experience rules and a study plan
  • NIST SP 800-145 and ISO/IEC 17788 vocabulary; roles of customer, provider, partner, broker, auditor and regulator
  • Cross-cutting aspects: interoperability, portability, reversibility and availability
  • Business impact analysis and the cost case for migration
  • Evaluating a provider through Common Criteria and FIPS 140 validations

Day 2: Domain 2 - Protecting Data Held by a Provider

  • Create, store, use, share, archive, destroy: the CCSP secure data lifecycle
  • Raw, volume, object, structured and unstructured storage per service model
  • Tokenisation, masking, anonymisation and key escrow compared
  • Information rights management and data discovery
  • Retention schedules, litigation hold and crypto-shredding, with an exam-style question set and debrief

Day 3: Domains 3 and 4 - Provider Platforms and Cloud Applications

  • Type 1 versus Type 2 hypervisors, guest escape and tenant separation
  • Provider data centre siting, power, cooling, redundancy tiers and recovery objectives across regions
  • The cloud software lifecycle and the OWASP Top 10 in a cloud context
  • STRIDE threat modelling, SAST, DAST and OWASP ASVS
  • Sandboxing, application virtualisation and API gateways

Day 4: Domain 5 - Running Security Day to Day

  • Building and securing the logical environment inside a tenant
  • ITIL change, configuration, capacity and problem management
  • Security operations visibility when telemetry belongs to the provider
  • Evidence collection and chain of custody under ISO/IEC 27037
  • Communicating with vendors, customers and regulators during an event, with an exam-style question set and debrief

Day 5: Domain 6 - Legal, Risk and Compliance, and Mock Exam

  • Conflicting jurisdictions, data sovereignty and eDiscovery under ISO/IEC 27050; privacy principles and ISO/IEC 27018
  • SOC 1, SOC 2 Type I and Type II, and the CSA STAR registry
  • Hosting agreement clauses: right to audit, breach notice, exit and data return
  • Enterprise risk appetite and residual risk when outsourcing to a provider
  • Full-length timed mock exam and domain-by-domain score review

Practical Exercises

These suggested case activities put the CCSP domains to work on decisions a cloud security manager signs off.

  • Suggested activity: decide whether an HR system can leave its current provider, scoring portability and reversibility.
  • Suggested activity: pick an obfuscation method for each column of a patient table.
  • Suggested activity: read a SOC 2 Type II extract and list the exceptions that matter to your organisation.
  • Suggested activity: redline a hosting agreement for audit rights, breach notice and exit.

FAQs

What background is recommended?

Several years in IT including time in information security. ISC2 sets its own experience rules for the credential; candidates should confirm them before booking the exam.

Is the course tied to one provider?

No. Like the CCSP exam it is vendor-neutral; provider names appear only as examples.

How does this differ from a hands-on engineering course?

It trains judgement across providers: contracts, assurance evidence, data decisions and risk, rather than configuring a single platform.

Conclusion

Participants finish having covered all six CCSP domains, a timed mock exam and several contract and assurance cases drawn from real provider decisions, with a personal list of weak areas to revise and a clearer way of judging any cloud provider's evidence, contracts and data controls before sitting the ISC2 exam.

credits: 5 credit per day

Course Mode: full-time

Provider: Agile Leaders Training Center

Showing 21-40 of 74 events
Image Location Dates Duration Mode Price Actions
Barcelona Barcelona Week 02, 2027
11 – 15 January 2027
1 Week Onsite €5,700
Casablanca Casablanca Week 03, 2027
18 – 22 January 2027
1 Week Onsite €4,100
Amsterdam Amsterdam Week 04, 2027
25 – 29 January 2027
1 Week Onsite €5,700
Sharm El-Sheikh Sharm El-Sheikh Week 05, 2027
1 – 5 February 2027
1 Week Onsite €4,100
Vienna Vienna Week 05, 2027
1 – 5 February 2027
1 Week Onsite €5,700
Kuwait Kuwait Week 05, 2027
7 – 11 February 2027
1 Week Onsite €5,500
Nice Nice Week 06, 2027
8 – 12 February 2027
1 Week Onsite €5,700
Madrid Madrid Week 07, 2027
15 – 19 February 2027
1 Week Onsite €5,700
Athens Athens Week 07, 2027
15 – 19 February 2027
1 Week Onsite €6,700
London London Week 08, 2027
22 – 26 February 2027
1 Week Onsite €5,700
Tokyo Tokyo Week 08, 2027
22 – 26 February 2027
1 Week Onsite €10,000
Manama Manama Week 08, 2027
28 February – 4 March 2027
1 Week Onsite €4,700
Barcelona Barcelona Week 10, 2027
8 – 12 March 2027
1 Week Onsite €5,700
Dubai Dubai Week 11, 2027
15 – 19 March 2027
1 Week Onsite €4,500
Istanbul Istanbul Week 11, 2027
15 – 19 March 2027
1 Week Onsite €4,500
Cairo Cairo Week 12, 2027
22 – 26 March 2027
1 Week Onsite €4,100
Paris Paris Week 12, 2027
22 – 26 March 2027
1 Week Onsite €5,700
Frankfurt Frankfurt Week 13, 2027
29 March – 2 April 2027
1 Week Onsite €5,700
Kuala Lumpur Kuala Lumpur Week 14, 2027
5 – 9 April 2027
1 Week Onsite €5,200
Amsterdam Amsterdam Week 14, 2027
5 – 9 April 2027
1 Week Onsite €5,700

Frequently asked questions

What does this course cover?

OverviewThis Complete Cloud Security Professional course prepares candidates for the CCSP (Certified Cloud Security Professional) credential from ISC2, which is vendor-neutral: it tests how a seasoned practitioner reasons about any provider's offering rather than how to click through one console. Over one week it walks through the six domains of the CCSP…

Are training dates available?

Yes. Available dates and destinations are listed in the course dates section on this page.

How can I register?

Choose an available date on this page and complete the registration form, or send a programme enquiry.

Can I download the course brochure?

Yes. Use the brochure download link provided on this page.

This course by city