Close

CCSK

Certificate of Cloud Security Knowledge

Just did the CCSP exam

(update: I passed!) Yesterday I took the CCSP exam. Certified Cloud Security Professional is the new certification launched by ISC2, and is supposed to be complementary to CCSK. I must have been one of the first, as it only opened last Tuesday. I think I did pretty well, but my results won’t be available for the […]

Read More
New cloud security certification CCSP to complement CCSK

Cloud security certification is getting a new dimension. (Update: I wrote a brief comparison of CCSP versus CCSK). In 2015 the Cloud Security Alliance and (ISC)2 announced a new cloud security certification: Certified Cloud Security Professional or CCSP for short. Read the official announcement here and here. CCSP is supposed to be a more extensive certification […]

Read More
Cloud computing can make you more secure

The number one concern cited for avoiding cloud computing is security. And there is a reason for that. Cloud providers have demonstrated some spectacular failures in the past, including Amazon’s near total shutdown of an entire region, Dropbox’s authentication snafu, and innumerous cloud providers that go belly-up. However, in the long run, cloud computing is […]

Read More
How does secure software development in the cloud work?

The typical software development model of develop, deploy and run (with security often as an afterthought) does not work very well in a cloud environment. The two biggest reasons are feature velocity and operational assurance. In a cloud provider environment, functional features come (and sometimes go) on a daily basis. At the same time, both […]

Read More
Why I go to Manila for Cloud Security

Next week (25/26 November 2013) I will deliver Cloud Security (CCSK) training near Manila, Philippines. If you are interested in attending, drop me a line, we may have a good seat for you. It is with very mixed feelings that I will travel to Manila. Is delivering CCSK training relevant in a country that has […]

Read More
Can we simplify cloud security?

Last week, the Cloud Security Alliance had its EMEA congress in Amsterdam. The day before, I got a chance to be the instructor on a CCSK workshop (Certificate of Cloud Security Knowledge). The lineup of industry experts at the congress was awesome, it included people directly involved in the security of the biggest cloud computing […]

Read More
CCSK training in Kuala Lumpur – trip report

Last week I delivered a two-day CCSK (certificate of cloud security knowledge) in Kuala Lumpur. The typical structure of this training, as suggested by the Cloud Security Alliance, calls for a day of lecture followed by a day of practical exercises.  However, I mixed lecture with case study and exercise, because I have experienced that […]

Read More
The cloud world will be a safer place

The Certificate of Cloud Security Knowledge is backed by the Cloud Security Alliance, in which basically every major cloud player is represented.   Today I managed to pass the exam, so I am now officially CCSK stamped. Next on my list is becoming a trainer for that. Although CCSK is at the introductory level, it […]

Read More