09/12/2010

Cloud Security -Certification of Cloud Security Knowledge

For all of you certification junkies - and in our field there are many :-)  - there is a good certification now available online (for $195 through Dec 2010) at the Cloud Security Alliance. Launched this month, it is a 50 question, multiple choice test that must be completed in 60 minutes - but don't worry - there is a study guide available at CCSK Study Guide.  The questions cover the information you will find in one overview document I mentioned in my last post - Cloud Security Alliance Guidance Version 2.1– Security Guidance for Critical Areas of Focus in Cloud Computing and another ENISA – Cloud Computing Risk Assessment.

The CSA is planning updates to this body of knowledge and will have a road map for certifications next year. In the meantime, it's a good idea to do the prep and take the exam. 

This certification isn't a substitute for current certifications such as CISM or CISSP. It is based on knowledge specific to cloud computing - so, you can't use any of your other certifications to grandfather you in!  

Since it is on-demand, it should fairly straightforward to set aside an afternoon  to review the material and then take the exam.  

Sep 12, 2010 8:24:00 AM | Cloud Computing, Governance, Risk and Compliance, governance, risk, compliance, security, controls, infrastructure, GRC, GRC, Information Governance, Information Security Risk Management, IT GRC, Risk Manangement

2 Comments

JVB

We recently put together free sample test questions for the CCSK based on the two documents used by the CSA for defining cloud security. Please check us out at ccskguide.org.

Posted by: JVB | 12/20/2010 at 11:28 AM

Javis Lounsbury

Thanks for this one! Lately, there is an explosive growth in certification. With these around, companies will always be assured that their data and records accurate and secured.

Posted by: Javis Lounsbury | 04/15/2011 at 12:51 AM

The comments to this entry are closed.

NEXT POST
Cloud Audit – Paving the Way to the GRC Enabled Cloud I’ve just joined one of the Cloud Audit working groups – focused on developing controls for cloud computing. What has been holding us back are consistent and standardized frameworks, open standards and interfaces that address not only controls but also easy to implement processes to provide assurances on levels of GRC and security in cloud environments. Enter Cloud Audit, designed to smash down the roadblocks and getting us flying in the cloud. Central to the groups’ work is something called A6 – which stands for Automated Audit, Assertion, Assessment, and Assurance API. The idea is that cloud providers and consumers of their services should be able to leverage an open, extensible and secure set of interfaces for Cloud GRC and Security.
PREVIOUS POST
Cloud Trust – Are you keeping up with your organization’s plans for monetizing the cloud? Cloud Trust – Are you keeping up with your organization’s plans for monetizing the cloud? Many enterprises are now embracing cloud computing – especially as a model to quickly launch new products and services. As GRC professionals, we are not always privy to these plans until they are well underway and can find ourselves in the position where we are trying to assure governance and security controls are in place in hosted environments – after the fact.

Yo Delmar

A MetricStream exec with a passion for Governance, Risk and Compliance

The Typepad Team

Search

My Other Accounts

Recent Comments