ISACA
Certificate of Cloud Auditing Knowledge (CCAK)
Audit cloud environments with rigour.
2 daysIntermediate9 modules
About this course
Audit cloud environments with rigour. Over two days you will cover cloud governance and compliance programmes, the Cloud Controls Matrix and CAIQ, cloud threat analysis, auditing standards for the cloud, continuous assurance in DevSecOps pipelines and the STAR programme, preparing for CCAK.
Curriculum
9 modules
- An Overview of Governance
- Cloud Assurance
- Cloud Governance Frameworks
- Cloud Risk Management
- Cloud Governance Tools
- Designing a Cloud Compliance Program
- Building a Cloud Compliance Program
- Legal & Regulatory Requirements
- Standards & Security Frameworks
- Identifying Controls & Measuring Effectiveness
- CSA Certification, Attestation, & Validation
- CCM
- CAIQ
- Relationship to Standards: Mappings & Gap Analysis
- Transition from CCM V3.0.1 to CCM V4
- Definitions & Purpose
- Attack Details & Impacts
- Mitigating Controls & Metrics
- A Use Case
- Evaluation Approach
- A Governance Perspective
- Legal, Regulatory & Standards Perspectives
- Risk Perspectives
- Services Changes Implications
- The Need for Continuous Assurance/Continuous Compliance
- Audit Characteristics, Criteria & Principles
- Auditing Standards for Cloud Computing
- Auditing an On-Premises Environment vs. Cloud
- Differences in Assessing Cloud Services & Cloud Delivery Models
- Cloud Audit Building, Planning & Execution
- CCM Audit Scoping Guidance
- CCM Risk Evaluation Guide
- CCM Audit Workbook
- CCM an Auditing Example
- DevOps and DevSecOps
- Auditing CI/CD Pipelines
- DevSecOps Automation and Maturity
- Standard for Security and Privacy
- Open Certification Framework
- STAR Registry
- STAR Level 1
- STAR Level 2
- STAR Level 3
Who it's for
IT auditors, compliance and cloud security professionals.
Before you start
No formal prerequisites. Bring curiosity and a willingness to practise.
Related courses
More in ISACA →Advanced
Advanced in AI Audit (AAIA)
ISACA
View course →Advanced
Advanced in AI Risk (AAIR)
ISACA
View course →Advanced
Advanced in AI Security Management (AAISM)
ISACA
View course →Intermediate
Certified Cybersecurity Operations Analyst (CCOA)
ISACA
View course →Intermediate
Certified Data Privacy Solutions Engineer (CDPSE)
ISACA
View course →Intermediate
Certified in Risk and Information Systems Control
ISACA
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.