Cloud Security Training in Belgrade

The CCSK Foundation course begins with foundational concepts, progressively increasing in complexity as it explores all 16 domains of the CSA Security Guidance, recommendations from the European Union Agency for Network & Information Security (ENISA), and an overview of the Cloud Controls Matrix.

This is a Cloud Security Alliance (CSA) authorized course, and NobleProg operates as an official CSA Training Partner.

The course is delivered by CSA Authorized CCSK Instructors.
All participants receive:

• official CSA CCSK Foundation course certificates
• official CCSK Foundation Student Handbooks
• 1 CCSK exam voucher and 1 re-attempt exam voucher

This course covers the most current version of the CCSK exam - currently version 4.1.

The CCSK Plus course builds upon the foundation module with expanded material and offers extensive hands-on activities that reinforce classroom instruction. Students engage in a scenario of bringing a fictional organization securely into the cloud, which gives them the opportunity to apply their knowledge by performing a series of activities that would be required in a real-world environment.

The CCSK Plus Course includes all the modules in the CCSK Foundation course with additional material.

This is a Cloud Security Alliance (CSA) authorized course and NobleProg is an official CSA Training Partner.

This course is delivered by CSA Authorized CCSK Instructors.

All attendees receive:

• official CSA CCSK Plus course certificates
• official CCSK Foundation Student Handbooks
• 1 CCSK exam voucher and 1 re-attempt exam voucher

This course covers the most current version of the CCSK exam - currently version 4.1.

Preparation Course for Cloud Computing Security Knowledge (CCSK)

The CCSK course is designed to provide a comprehensive understanding of security issues and best practices across a wide spectrum of cloud computing domains. As cloud computing increasingly becomes the primary IT infrastructure, CCSK knowledge is relevant to a diverse array of IT and information security roles within virtually every organization. It is highly recommended for IT auditors, system administrators, and security professionals with a minimum of 5 years of experience.

Upon completion of this course, students will be able to:

• Validate the competence they have acquired through practical experience in cloud security.
• Effectively prepare for the CCSK examination.
• Showcase their technical knowledge, skills, and abilities to effectively develop a holistic cloud security program aligned with globally accepted standards.
• Differentiate themselves from other candidates, enhancing their prospects for desirable employment in the rapidly expanding cloud security market.
• Gain access to valuable career resources, including tools, networking opportunities, and peer-to-peer knowledge exchange.
• Strengthen protection against threats by leveraging qualified professionals who possess the expertise to competently design, build, and maintain a secure cloud business environment.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to make arrangements.

Description:

The 2-day CCSK Plus curriculum encompasses all material from the CCSK Foundation course and extends it through comprehensive, hands-on labs conducted on the second day of training. Participants will gain practical experience by completing a series of exercises centered around a scenario that securely transitions a fictional enterprise into the cloud. Upon completion, attendees will be thoroughly prepared for the CCSK certification exam, which is sponsored by the Cloud Security Alliance. While the second day includes additional lecture segments, the majority of the time is dedicated to assessing, constructing, and securing cloud infrastructure through practical exercises.

Objectives:

This two-day program begins with the CCSK Basic training module, followed by a second day featuring advanced content and practical activities.

Target Audience:

While designed primarily for security professionals, this course is also beneficial for any individual seeking to deepen their understanding of cloud security.

CCSP is a globally recognized credential developed through the combined expertise of two industry-leading authorities on information systems and cloud computing security: (ISC)² and CSA. The CCSP credential is highly relevant for cloud security within a global context, especially given the legal, regulatory, and compliance challenges associated with the multi-jurisdictional storage of personally identifiable information (PII).

For qualified candidates, the CCSP exam assesses proficiency in the six CCSP domains of the (ISC)² Common Body of Knowledge (CBK), which cover:

• Architectural Concepts & Design Requirements
• Cloud Data Security
• Cloud Platform & Infrastructure Security
• Cloud Application Security
• Operations
• Legal & Compliance

The shift to cloud computing transforms how applications are developed, deployed, and managed. This transition reallocates responsibilities between service providers and customers, introducing cloud-native platforms like containers, serverless architectures, and managed services that necessitate adapted security controls. Consequently, security strategies must encompass infrastructure hardening, identity and access management, data protection, secure development methodologies, and mitigation of cloud-specific threat vectors.

This instructor-led, live training (available online or on-site) is designed for intermediate-level developers, security engineers, and IT managers seeking practical, hands-on skills to secure cloud applications and their underlying infrastructure. Participants will learn repeatable controls and assessment techniques aligned with current industry frameworks and cloud provider recommendations.

Upon completion of this training, participants will be able to:

• Articulate the cloud shared responsibility model and apply it to application security decisions.
• Harden cloud infrastructure (IaaS), secure platform services (PaaS), and evaluate SaaS configurations.
• Implement secure coding and OWASP-based mitigation patterns in cloud-hosted applications.
• Integrate security tooling into CI/CD pipelines (SAST/DAST/IAST/RASP) and adopt shift-left practices.

Course Format

• Interactive lectures and discussions supported by live demonstrations.
• Hands-on labs utilizing cloud consoles, containers, serverless functions, and CI/CD pipelines.
• Practical exercises: secure configuration, vulnerability scanning, attack simulation, and remediation planning.

Customization Options

• For customized training requests, please contact us to arrange a tailored session.

This course equips you to implement appropriate security controls in the cloud, often leveraging automation to "inspect what you expect." We begin by diving headfirst into one of the most crucial aspects of cloud computing: Identity and Access Management (IAM). From there, we proceed to secure the cloud through discussion and practical, hands-on exercises related to several key topics. These exercises focus on defending various cloud workloads operating across different CSP models: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), and Functions as a Service (FaaS).

This course delivers hands-on expertise in OpenStack and private cloud security. It begins with an introduction to the system, followed by practical guidance on securing private clouds and hardening OpenStack installations. Throughout the training, participants explore each core OpenStack module, constructing virtual identities, images, networks, compute nodes, and storage resources while addressing key security considerations. Each attendee receives a dedicated training environment featuring a complete OpenStack deployment tailored to a specific cloud architecture (such as storage or networking). The program can be extensively customized to align with client requirements.

Customization options
The training duration can be adjusted to two days, concentrating on the core areas most relevant to the customer. Additionally, the scope can be expanded to cover administrative tasks, design patterns, networking configurations, or troubleshooting techniques related to OpenStack deployments.