Online training based on CSA's vendor-neutral research

This course includes the CCSK exam token and teaches the fundamentals of cloud security including: architecture, data security, managing risk and more.

Self-paced course. Learn the guidelines and practices for secure microservices development and governance, mechanisms for maintaining situational awareness, and container incident management.

Virtual Instructor Led Course. This training includes a CCSK exam token and teaches the fundamentals of cloud security including: architecture, data security, managing risk and more. Hands-on labs are included.

This bundle includes the CCSK course and exam + FREE Introduction to Zero Trust Architecture course.

In this course, learners will get an in-depth look at the main components, workflows, communication flows, and logging of Software-Defined Perimeter (SDP), as well as SDP and NIST Zero Trust Architecture deployment models.

Software-Defined Perimeters enable security professionals to protect their organizations from sophisticated cyber threats. In this course, learners will get an in-depth look at the key features and technologies of SDP.

Self-paced course. Learn the container lifecycle phases, such as initiation, planning and design, implementation, operations and maintenance, and disposition. Container assurance measures and hardware-based security methods are also covered.

Self-paced course. Learn the main technical, operational, regulatory, legal, and financial considerations for cloud KMS deployments, as well as best practices for using programmatic library interfaces and practical API management.

Foundations, definitions, concepts, and components of Zero Trust. In this module, learners will be introduced to goals, benefits, planning considerations, implementation options, and use cases for Zero Trust.

Learn about the collective responsibility pillar of DevSecOps and the techniques needed to sustain and measure a DevSecOps culture program. Self-paced course.

Self-paced course. Learn the common container architecture risks and the mitigations for preventing container security failures. Core component risks, container threat scenarios, and relevant mitigations are also covered.

Self-paced course. Learn the history, definitions, components, key features, main technologies, and service patterns of cloud key management, as well as considerations for key management system selection and planning.

Virtual Instructor-Led Course. During this course you will learn the unique requirements for governance, risk, compliance and security in the cloud, as you gain knowledge on cloud security assessment methods and techniques.

Try the Certificate of Cloud Security Knowledge (CCSK) self-paced online course for free.

A repository for some of CSA's most popular research artifacts, study materials, and relevant documents. This library includes the CSA Security Guidance v4, ENISA Recommendations, Top Threats document and more.

Teaches the fundamentals of cloud security including: architecture, data security, managing risk and more.

Learn about the top 11 cloud computing issues related to threats and vulnerabilities, cloud threat modeling techniques, and cloud risk treatment techniques.

Software-Defined Perimeter (SDP) can be used to implement Zero Trust networks. In this module, we explain the core tenets, underlying technologies, main architectural components, and technology and business benefits of SDP.

A free introduction to CSA’s cloud governance, risk and compliance tools including the Cloud Controls Matrix (CCM), CAIQ and STAR Registry. In this course sample, we provide a walk through of each of these tools and explain how to use them.

Self-paced course. Learn the history, evolution, and underlying technologies of microservices and containers, key adjacent architectures, and security challenges and mitigation strategies for deploying applications in containers.

This exam tests the student’s knowledge and comprehension on how to effectively conduct 2nd or 3rd-party audits of a cloud service provider (CSP) against the CSA STAR Certification standard.

Self-paced course. Learn the skills and knowledge required to audit cloud service providers against the STAR Certification standard. Auditing techniques, maturity modeling, and Cloud Controls Matrix control areas will also be covered.

Self-paced course. Learn the guidelines and practices for secure microservices development and governance, mechanisms for maintaining situational awareness, and container incident management.

Self-paced course. Learn the history, evolution, and underlying technologies of microservices and containers, key adjacent architectures, and security challenges and mitigation strategies for deploying applications in containers.

Self-paced course. Learn the history, definitions, components, key features, main technologies, and service patterns of cloud key management, as well as considerations for key management system selection and planning.

Foundations, definitions, concepts, and components of Zero Trust. In this module, learners will be introduced to goals, benefits, planning considerations, implementation options, and use cases for Zero Trust.

Learn about the top 11 cloud computing issues related to threats and vulnerabilities, cloud threat modeling techniques, and cloud risk treatment techniques.

Self-paced course. Learn the container lifecycle phases, such as initiation, planning and design, implementation, operations and maintenance, and disposition. Container assurance measures and hardware-based security methods are also covered.

Self-paced course. Learn the main technical, operational, regulatory, legal, and financial considerations for cloud KMS deployments, as well as best practices for using programmatic library interfaces and practical API management.

Learn about the collective responsibility pillar of DevSecOps and the techniques needed to sustain and measure a DevSecOps culture program. Self-paced course.

Self-paced course. Learn the common container architecture risks and the mitigations for preventing container security failures. Core component risks, container threat scenarios, and relevant mitigations are also covered.

This exam tests the student’s knowledge and comprehension on how to effectively conduct 2nd or 3rd-party audits of a cloud service provider (CSP) against the CSA STAR Certification standard.

Self-paced course. Learn the skills and knowledge required to audit cloud service providers against the STAR Certification standard. Auditing techniques, maturity modeling, and Cloud Controls Matrix control areas will also be covered.

Foundations, definitions, concepts, and components of Zero Trust. In this module, learners will be introduced to goals, benefits, planning considerations, implementation options, and use cases for Zero Trust.

Software-Defined Perimeters enable security professionals to protect their organizations from sophisticated cyber threats. In this course, learners will get an in-depth look at the key features and technologies of SDP.

Software-Defined Perimeter (SDP) can be used to implement Zero Trust networks. In this module, we explain the core tenets, underlying technologies, main architectural components, and technology and business benefits of SDP.

In this course, learners will get an in-depth look at the main components, workflows, communication flows, and logging of Software-Defined Perimeter (SDP), as well as SDP and NIST Zero Trust Architecture deployment models.

This exam tests the student’s knowledge and comprehension on how to effectively conduct 2nd or 3rd-party audits of a cloud service provider (CSP) against the CSA STAR Certification standard.

Self-paced course. Learn the skills and knowledge required to audit cloud service providers against the STAR Certification standard. Auditing techniques, maturity modeling, and Cloud Controls Matrix control areas will also be covered.