Cloud Security Training in Sofia

Description:

This 2-day CCSK Plus course covers all material from the CCSK Foundation course and extends it with comprehensive hands-on labs during the second day of instruction. Participants will apply their knowledge through a series of exercises centered on a scenario that safely transitions a fictional organization to the cloud. Upon completion of this training, students will be well-prepared for the CCSK certification exam, which is sponsored by the Cloud Security Alliance. While the second day includes additional lectures, the majority of the time is dedicated to assessing, building, and securing a cloud infrastructure through practical exercises.

Objectives:

This two-day course begins with CCSK- Basic training, followed by a second day featuring additional content and hands-on activities.

Target Audience:

This class is primarily designed for security professionals but is also valuable for anyone seeking to expand their understanding of cloud security.

The adoption of cloud technologies transforms how applications are constructed, deployed, and managed. This shift redistributes responsibilities between service providers and customers while introducing cloud-native platforms such as containers, serverless architectures, and managed services, all of which necessitate adapted security controls. Consequently, security strategies must encompass infrastructure hardening, identity and access management, data protection, secure development methodologies, and cloud-specific threat mitigation.

This instructor-led, live training (available online or onsite) targets intermediate-level developers, security engineers, and IT managers seeking practical, hands-on skills to secure cloud applications and their underlying infrastructure. Participants will learn repeatable controls and assessment techniques aligned with current industry frameworks and cloud provider guidelines.

Upon completion of this training, participants will be able to:

• Explain the cloud shared-responsibility model and apply it to application security decisions.
• Harden cloud infrastructure (IaaS), secure platform services (PaaS), and evaluate SaaS configurations.
• Apply secure coding and OWASP-based mitigation patterns to cloud-hosted applications.
• Integrate security tooling into CI/CD pipelines (SAST/DAST/IAST/RASP) and adopt shift-left practices.

Format of the Course

• Interactive lectures and discussions supported by live demonstrations.
• Hands-on labs utilizing cloud consoles, containers, serverless functions, and CI/CD pipelines.
• Practical exercises covering secure configuration, vulnerability scanning, attack simulation, and remediation planning.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

The shift to cloud environments creates a unique challenge for financial institutions: while it provides exceptional agility, it also introduces complex security layers that traditional audit methods struggle to address. Equipping IT Auditors with specialized cloud security expertise is not merely an operational objective—it is a fiduciary duty.

This program is carefully crafted to transform your audit team into a proactive defense mechanism. By the conclusion of this session, participants will advance from theoretical knowledge to practical mastery, ensuring that the bank’s cloud infrastructure is resilient against contemporary threats and fully compliant with the stringent standards of the financial industry.