CCSP Study Notes

Key Topics:

• Cloud computing concepts and definitions
• Cloud reference architecture (NIST, ISO/IEC)
• Security concepts relevant to cloud computing
• Design principles of secure cloud computing
• Disaster recovery and business continuity planning
• Risk assessment and analysis methods

Cloud Service Models:

IaaS (Infrastructure as a Service): Provides virtualized computing resources over the internet. Customer manages OS, applications, and data.

PaaS (Platform as a Service): Provides platform for developing, running, and managing applications without infrastructure complexity.

SaaS (Software as a Service): Delivers software applications over the internet on a subscription basis.

Key Topics:

• Data lifecycle phases
• Cloud storage architectures
• Data security technologies and strategies
• Data discovery and classification
• Data rights management (DRM)
• Data retention, deletion, and archiving policies

Key Topics:

• Physical and environmental security design
• Cloud infrastructure components
• Network security in cloud environments
• Compute and storage security
• Virtualization security

Key Topics:

• Secure Software Development Lifecycle (SDLC)
• Application security testing methodologies
• Secure coding practices
• Identity and access management
• Encryption and key management
• API security

Key Topics:

• Incident detection, analysis, and response
• Infrastructure management
• Logging, monitoring, and alerting
• Patch and configuration management
• Change and release management

Key Topics:

• Legal frameworks and requirements
• Compliance and audit requirements
• Privacy issues and regulations (GDPR, CCPA)
• Audit processes and methodologies
• Risk management frameworks
• Vendor and third-party management