Skip to main content

Description

In the digital age, cloud computing services offer many advantages for businesses, but they also entail security risks. Cybercriminals are increasingly interested in these services because of the huge amount of data that is stored and processed there. As a result, cloud security has become a key priority for organisations. Flaws in these solutions can lead to the disclosure, theft or loss of sensitive data, which can result in high financial costs and reputational damage.
Our training programme to become a Certified Cloud Security Engineer (C|CSE) offers a comprehensive approach to the security of cloud services. Developed by experts in the field, it covers topics such as data security, application security, maintenance, penetration testing, risk management and incident response.
Aimed primarily at cybersecurity professionals, this course offers a global perspective on securing the AWS, Azure and Google Cloud platforms, as well as private and hybrid architectures.

Day 1: Introduction to security in the Cloud

This first day covers the fundamental concepts of cloud computing, including the different service models available. You will also learn about the associated threats and vulnerabilities, as well as the security assessment models and shared responsibilities that are essential for establishing a secure cloud environment and protecting an organisation's resources.

Day 2: Securing cloud infrastructures

The second day focuses on the key components of cloud architectures. You will learn how to secure multi-tenant, virtualised, physical and logical elements. On this day, we will also look at recommended configurations and best practices for protecting physical data centres and cloud infrastructures using the tools provided by Azure, AWS and Google Cloud.

Day 3: Application and data security

During this day, we will look at securing cloud applications and integrating security into the API development cycle. You will also discover the various security services and tools offered by Azure, AWS and Google Cloud. We will then look at data storage in the cloud, its lifecycle, and the controls needed to effectively protect data locally and in transit to the cloud.

Day 4: Operational security and incident management

covers the security controls that are essential for the creation, operation and management of cloud infrastructures. We will also explore the services and tools available on AWS, Azure and Google Cloud to ensure secure operations. In addition, we will examine the incident response process, including the incident lifecycle and the use of SOAR technologies for effective response.

Day 5: Business continuity, governance and legal aspects

To conclude this course, we will discuss the importance of business continuity and disaster recovery planning. You will learn about the backup and recovery tools offered by AWS, Azure and Google Cloud. Finally, we'll look at governance standards, risk management and the legal obligations associated with using the cloud. This final day will also highlight the audit and compliance services available on these platforms.

This course is aimed at the following audiences:

  • experienced IT professionals such as Cloud engineers, network security administrators or cybersecurity analysts ;
  • any other IT professional responsible for administering a network or Cloud platform.

To follow the Cloud Security Engineer course, you need the following prerequisites:

  • basic knowledge of cybersecurity, cloud technologies and network security management.

Cloud platform security skills

Security planning and management: design, implement and monitor the security of cloud platforms within an organisation.
Access management: Access cloud resources using identity and access management (IAM).
Network architecture assessment: Analyse and control the architecture of an organisational cloud network by carrying out the security checks recommended by the service provider.

Data analysis and protection

Assessment of storage techniques: Examine cloud storage methods and identify potential risks to data.
Protection against attacks: Implement measures to secure data stored in the cloud.
Security on different platforms
Implementing security on AWS, Azure and Google Cloud: Managing and securing cloud environments on these three major platforms.
Understanding the shared responsibility model: Understanding the respective responsibilities between the company and each service provider.

Security standards and audits

Assessing security standards: Analysing the various security standards, compliance programmes and functionalities available on AWS, Azure and Google Cloud.
Carrying out security audits: Carrying out audits for each service provider to assess security.

Threat and risk management

Implement detection systems: Implement systems offered by Azure, AWS and Google Cloud to detect threats to cloud services.
Risk assessment: Identify and mitigate the risks, threats and vulnerabilities associated with cloud infrastructure.

Cloud infrastructure best practices

Adoption of best practices: Apply best practices to secure all components of a cloud infrastructure (network, storage, virtualisation and management).
Securing cloud applications: Protect enterprise applications by integrating security throughout the API development cycle and adding additional controls.

Operational and legal management

Creation of a customer management framework: Establish an incident response plan and a business continuity plan for each cloud service.
Use of security tools: Exploit the security services and tools offered by Azure, AWS and Google Cloud to strengthen the security of a company's cloud.
Legal awareness: Understanding the legal issues associated with the cloud to ensure effective protection.

Diversified cloud infrastructure

Security for different environments: Know and apply security measures adapted to private, multi-tenant and hybrid cloud environments.
Certification
Passing the C|CSE exam (312-40): Pass the exam to become a Certified Cloud Security Engineer.

We design, build and support digital products for clients who want to make a positive impact in their industry. Creative with technology, we develop great solutions to help our clients grow and especially by strengthening our relationships based on continuous improvement, maintenance, support and hosting services.

Follow us