Cloud Security Training in Oslo

Description:

This 2-day CCSK Plus course encompasses all the content from the CCSK Foundation course and builds upon it with extensive hands-on labs on the second day of training. Participants will apply their knowledge through a series of exercises that involve a scenario where a fictional organization securely transitions to the cloud. Upon completion of this training, students will be well-prepared for the CCSK certification exam, sponsored by the Cloud Security Alliance. The second day includes additional lectures, though the majority of the time is dedicated to assessing, building, and securing a cloud infrastructure through practical exercises.

Objectives:

This two-day class starts with the CCSK Basic training and continues with a second day of expanded content and hands-on activities.

Target Audience:

This course is primarily aimed at security professionals but is also beneficial for anyone seeking to deepen their understanding of cloud security.

Cloud adoption transforms the way applications are developed, deployed, and managed, redistributing responsibilities between vendors and customers. It introduces cloud-native platforms such as containers, serverless architectures, and managed services, which necessitate adapted security measures. Security strategies must encompass infrastructure hardening, identity and access management, data protection, secure development practices, and cloud-specific threat mitigation.

This instructor-led, live training (available both online and on-site) is designed for intermediate-level developers, security engineers, and IT managers who aim to acquire practical, hands-on skills in securing cloud applications and their underlying infrastructure. Participants will also learn repeatable controls and assessment techniques that align with current industry frameworks and cloud provider guidelines.

By the end of this training, participants will be able to:

• Understand the cloud shared-responsibility model and apply it to application security decisions.
• Strengthen cloud infrastructure (IaaS), secure platform services (PaaS), and evaluate SaaS configurations.
• Implement secure coding practices and OWASP-based mitigation patterns for cloud-hosted applications.
• Integrate security tools into CI/CD pipelines (SAST, DAST, IAST, RASP) and adopt shift-left practices.

Format of the Course

• Interactive lectures and discussions paired with live demonstrations.
• Hands-on labs using cloud consoles, containers, serverless functions, and CI/CD pipelines.
• Practical exercises: secure configuration, vulnerability scanning, attack simulation, and remediation planning.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

The course offers practical knowledge on OpenStack and private cloud security. It begins with an introduction to the system, followed by hands-on learning about securing private clouds and OpenStack installations. Throughout the course, each core OpenStack module is covered, allowing participants to build virtual identity, image, network, compute, and storage resources while discussing pertinent security issues. Each participant will have their own training environment featuring a complete OpenStack installation based on the chosen cloud architecture (e.g., storage, networking). The training can be tailored extensively to meet the specific needs of the client.

Customization Options
The course can be condensed into 2 days, focusing on the core aspects most relevant to the customer. Alternatively, it can be extended to cover additional topics such as administration, design, networking, and troubleshooting related to OpenStack deployments.