Symantec IT Risk and Compliance Product Group

How confident are you in your knowledge of cloud computing?  Fill your knowledge gaps! Our 2-day Cloud Security Workshop at Cloud Expo West on November 6, 7 is a lively, interactive learning experience based on the guidelines from the Cloud Security Alliance (CSA).  Gain critical knowledge and best practices on how to secure cloud computing. Benefit from the knowledge of a security industry veteran from Symantec. Interact with IT and security peers and professionals in the industry.  The course also provides helpful tips to help you prepare for the Certificate of Cloud Security Knowledge (CCSK) offered by the CSA.  Register before 10/12/2012 and get the workshop and a free VIP pass to the 4-day conference for only $895.  Contact Linda Martin (linda_martin@symantec.com) to get the special pricing.

Freebies for attendees:

• Register for the workshop and enter to win a set of headphones by Dr. Dre.  Must attend both days of training to qualify.
• Course includes one free CCSK test voucher
• Cloud Security workshop attendees are also entitled to attend all 4 days of Cloud Expo with the exception of Cloud Computing Boot-camp, Cloud Essentials @ Cloud Expo, daily luncheons, and the collectible conference bag

Objectives:
At the end of this course, participants will be able to:

• Explain and define the principles and concepts related to the CSA’s Security Guidance for Critical Areas of Focus in Cloud Computing
• Apply that knowledge toward developing cloud integration and  migration strategies

 Prerequisites:
Students should be familiar with advanced computer terminology such as TCP/IP networking and Internet terms.  A knowledge of security fundamentals such as firewalls and encryption are also helpful. *If planning to take the optional test after the class, candidates must thoroughly read and understand the two documents referenced in the CCSK prep guide. The documents are, CSA Security Guidance for Critical Areas of Focus in Cloud Computing V2.1 and the ENISA report “Cloud Computing: Benefits, Risks and Recommendations for Information Security.

Course Student Material:
Participants receive an electronic copy of the student handbook.  Please bring  your laptop if you would like to take the CCSK test on-site at the Expo at the end of the 2-day session (see pre-requisites).  

COURSE AGENDA

Day 1 – Tuesday, November 6^th  9:00 – 4:30 (including 1 hour lunch)

Intro to Cloud Computing

• Cloud Computing Architectural Framework (Domain 1)

Creating and Using a Public Cloud Instance

• Traditional Security, Business Continuity, and Disaster Recovery (Domain 7)
• Data Center Operations (Domain 8)

Securing Public Cloud Data

• Information Lifecycle Management (Domain 5)
• Encryption and Key Management (Domain 11)

Securing Cloud Users and Applications

• Application Security (Domain 10)
• Identity and Access Management (Domain 12)

Day 2 – Wednesday, November 7^th 9:00 – 4:30 (including 1 hour lunch)

Managing Cloud Security and Risk

• Portability and Interoperability (Domain 6)
• Incident Response, Notification, and Remediation (Domain 9)
• Governance and Enterprise Risk Management (Domain 2)
• Legal and Electronic Discovery (Domain 3)
• Compliance and Audit (Domain 4)
• European Network and Information Security Agency (ENISA)

Creating and Securing Private Clouds

• Virtualization (Domain 13)

Summary of class and CCSK Exam Prep

•  Exam cram – review of steps needed to prep for exam and exam prep resources
• One on one discussion with instructor on questions you might have related to how to study for the exam

About the Examination:

•  The CCSK examination is a timed, multiple choice examination located at https://ccsk.cloudsecurityalliance.org. The examination consists of 50 multiple choice questions, and must be completed within 60 minutes. A participant must correctly answer 80% of the questions to receive a passing score.
• It is not possible to pause or stop the examination and finish it at a later date. Therefore, the participant should be properly prepared to take the test before starting, and while you can choose to take the test any time of the day or night, one should budget for 60 minutes of uninterrupted time once you make the commitment to start the test.
• 70% of the questions are based on the CSA Guidance, 20% of the questions are based on the ENISA report and 10% of the questions are applied knowledge questions related to the best practices in both documents. The very best way to prepare for the CCSK examination is to thoroughly read and understand these two documents.  The links for the CSA Guidance and ENISA report can be found in the CCSK Prep Guide: https://cloudsecurityalliance.org/CCSK-prep.pdf