Online Cloud Security Training in Taiwan

Description:

This 2-day CCSK Plus course encompasses all the content from the CCSK Foundation course and builds upon it with extensive hands-on labs during a second day of training. Participants will gain practical experience by performing a series of exercises that simulate bringing a fictional organization securely into the cloud. Upon completing this training, students will be well-prepared for the CCSK certification exam, which is sponsored by the Cloud Security Alliance. The second day of the course includes additional lectures, but the focus remains on assessing, building, and securing a cloud infrastructure through practical exercises.

Objectives:

This two-day class starts with CCSK Basic training and continues with a second day of advanced content and hands-on activities.

Target Audience:

This course is designed for security professionals but is also beneficial for anyone looking to deepen their understanding of cloud security.

Cloud adoption transforms how applications are developed, deployed, and managed, redistributing responsibilities between vendors and customers. It introduces cloud-native platforms such as containers, serverless computing, and managed services, which necessitate adapted security measures. Security must address infrastructure hardening, identity and access management, data protection, secure development practices, and cloud-specific threats.

This instructor-led, live training (available online or onsite) is designed for intermediate-level developers, security engineers, and IT managers who aim to gain practical, hands-on skills in securing cloud applications and their supporting infrastructure. Participants will also learn repeatable controls and assessment techniques that align with current industry frameworks and cloud provider guidance.

By the end of this training, participants will be able to:

• Understand the shared-responsibility model in the cloud and apply it to application security decisions.
• Strengthen cloud infrastructure (IaaS), secure platform services (PaaS), and evaluate SaaS configurations.
• Implement secure coding practices and OWASP-based mitigation patterns for cloud-hosted applications.
• Integrate security tools into CI/CD pipelines (SAST, DAST, IAST, RASP) and adopt shift-left practices.

Format of the Course

• Interactive lecture and discussion with live demonstrations.
• Hands-on labs using cloud consoles, containers, serverless functions, and CI/CD pipelines.
• Practical exercises: secure configuration, vulnerability scanning, attack simulation, and remediation planning.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This course offers practical knowledge on OpenStack and private cloud security. It begins with an introduction to the system, followed by hands-on experience in securing private clouds and OpenStack installations. Throughout the course, participants will explore each core OpenStack module, building virtual identity, image, network, compute, and storage resources while delving into relevant security topics. Each participant receives their own training environment featuring a complete OpenStack installation based on the selected cloud architecture (e.g., storage, networking). The training can be tailored to meet the specific needs of the client.

Customization Options
The course can be condensed to 2 days, focusing on core aspects that are most relevant to the customer. Alternatively, it can be extended to cover additional topics such as administrative tasks, design considerations, networking, and troubleshooting related to OpenStack deployments.