(ISC)2 CCSP Certified Cloud Security Professional Official Study Guide, 2nd Edition

Table of contents

1. Cover
2. Acknowledgments
3. About the Author
4. About the Technical Editor
5. Introduction
   1. Overview of the CCSP Exam
   2. Notes on This Book's Organization
   3. What Is Included with the Additional Study Tools
6. Assessment Test
7. Answers to Assessment Test
8. Chapter 1 Architectural Concepts
   1. Cloud Characteristics
   2. Business Requirements
   3. Cloud Evolution, Vernacular, and Models
   4. Cloud Computing Roles and Responsibilities
   5. Cloud Computing Definitions
   6. Foundational Concepts of Cloud Computing
   7. Related and Emerging Technologies
   8. Summary
   9. Exam Essentials
   10. Written Labs
   11. Review Questions
9. Chapter 2 Design Requirements
   1. Business Requirements Analysis
   2. Security Considerations for Different Cloud Categories
   3. Design Principles for Protecting Sensitive Data
   4. Summary
   5. Exam Essentials
   6. Written Labs
   7. Review Questions
10. Chapter 3 Data Classification
    1. Data Inventory and Discovery
    2. Jurisdictional Requirements
    3. Information Rights Management (IRM)
    4. Data Control
    5. Summary
    6. Exam Essentials
    7. Written Labs
    8. Review Questions
11. Chapter 4 Cloud Data Security
    1. Cloud Data Lifecycle
    2. Cloud Storage Architectures
    3. Cloud Data Security Foundational Strategies
    4. Summary
    5. Exam Essentials
    6. Written Labs
    7. Review Questions
12. Chapter 5 Security in the Cloud
    1. Shared Cloud Platform Risks and Responsibilities
    2. Cloud Computing Risks by Deployment Model
    3. Cloud Computing Risks by Service Model
    4. Virtualization
    5. Disaster Recovery (DR) and Business Continuity (BC)
    6. Summary
    7. Exam Essentials
    8. Written Labs
    9. Review Questions
13. Chapter 6 Responsibilities in the Cloud
    1. Foundations of Managed Services
    2. Business Requirements
    3. Shared Responsibilities by Service Type
    4. Shared Administration of OS, Middleware, or Applications
    5. Shared Responsibilities: Data Access
    6. Lack of Physical Access
    7. Summary
    8. Exam Essentials
    9. Written Labs
    10. Review Questions
14. Chapter 7 Cloud Application Security
    1. Training and Awareness
    2. Cloud-Secure Software Development Lifecycle (SDLC)
    3. ISO/IEC 27034-1 Standards for Secure Application Development
    4. Identity and Access Management (IAM)
    5. Cloud Application Architecture
    6. Cloud Application Assurance and Validation
    7. Summary
    8. Exam Essentials
    9. Written Labs
    10. Review Questions
15. Chapter 8 Operations Elements
    1. Physical/Logical Operations
    2. Security Operations Center
    3. Summary
    4. Exam Essentials
    5. Written Labs
    6. Review Questions
16. Chapter 9 Operations Management
    1. Monitoring, Capacity, and Maintenance
    2. Change and Configuration Management (CM)
    3. IT Service Management and Continual Service Improvement
    4. Business Continuity and Disaster Recovery (BC/DR)
    5. Summary
    6. Exam Essentials
    7. Written Labs
    8. Review Questions
17. Chapter 10 Legal and Compliance Part 1
    1. Legal Requirements and Unique Risks in the Cloud Environment
    2. Potential Personal and Data Privacy Issues in the Cloud Environment
    3. Audit Processes, Methodologies, and Cloud Adaptations
    4. Summary
    5. Exam Essentials
    6. Written Labs
    7. Review Questions
18. Chapter 11 Legal and Compliance Part 2
    1. The Impact of Diverse Geographical Locations and Legal Jurisdictions
    2. Business Requirements
    3. Cloud Contract Design and Management for Outsourcing
    4. Identifying Appropriate Supply Chain and Vendor Management Processes
    5. Summary
    6. Exam Essentials
    7. Written Labs
    8. Review Questions
19. Appendix A Answers to Written Labs
    1. Chapter 1: Architectural Concepts
    2. Chapter 2: Design Requirements
    3. Chapter 3: Data Classification
    4. Chapter 4: Cloud Data Security
    5. Chapter 5: Security in the Cloud
    6. Chapter 6: Responsibilities in the Cloud
    7. Chapter 7: Cloud Application Security
    8. Chapter 8: Operations Elements
    9. Chapter 9: Operations Management
    10. Chapter 10: Legal and Compliance Part 1
    11. Chapter 11: Legal and Compliance Part 2
20. Appendix B Answers to Review Questions
    1. Chapter 1: Architectural Concepts
    2. Chapter 2: Design Requirements
    3. Chapter 3: Data Classification
    4. Chapter 4: Cloud Data Security
    5. Chapter 5: Security in the Cloud
    6. Chapter 6: Responsibilities in the Cloud
    7. Chapter 7: Cloud Application Security
    8. Chapter 8: Operations Elements
    9. Chapter 9: Operations Management
    10. Chapter 10: Legal and Compliance Part 1
    11. Chapter 11: Legal and Compliance Part 2
21. Index
22. Advert
23. End User License Agreement