Lead Cloud Security Manager
Most organizations now store data and run software in the cloud, on servers operated by cloud providers. Remote work and online services have sped up this move.
Cloud security protects the data, applications and systems an organization keeps in the cloud. The work is shared: the provider secures its platform, and the customer secures how it sets up and uses each service. ISO/IEC 27017 gives guidance on security controls for cloud services, for providers and customers alike. ISO/IEC 27018 gives cloud providers guidance on protecting the personal data they handle for their customers.
The PECB Lead Cloud Security Manager training course equips you to plan, implement, manage and improve a cloud security program based on ISO/IEC 27017 and ISO/IEC 27018. It covers cloud security risks, cloud-specific controls, incident management and security testing, including the protection of personal data in the cloud.
Course Summary
- Delivery format
Self-study
- Language
English
- Suggested study schedule (The Tech Academy)
14 days at 3 hours a day, about 42 hours in total. Plan more time if the subject is new to you or you want extra practice and revision. PECB plans this course as five days of study, including the exam.
- Included
More than 500 pages of PECB course material, the exam and certification fees and an attestation of course completion worth 31 CPD credits
- Credential
Passing the exam lets you apply for a PECB Cloud Security Manager credential. PECB awards the level that matches your experience, starting at Provisional Cloud Security Manager for people new to the field. Certification Requirements, farther down this page, lists every level
Why Should You Attend?
Organizations that move to the cloud need people who can plan and manage its security. This course covers planning, implementing, managing, monitoring and maintaining a cloud security program based on ISO/IEC 27017 and ISO/IEC 27018.
Topics include cloud computing concepts, cloud security risk management, cloud-specific controls, incident management and security testing. After the course, you can sit the exam and apply for the PECB Certified Lead Cloud Security Manager credential, or the level that matches your experience.
Who Should Attend?
- Cloud security and information security professionals who will manage a cloud security program
- Managers or consultants who want to master cloud security best practices
- People responsible for maintaining and managing a cloud security program
- Technical experts who want to deepen their cloud security knowledge
- Cloud security expert advisors
Learning Objectives
By the end of this course, you will be able to:
- Explain the concepts, approaches, methods and techniques for implementing and managing a cloud security program
- Describe how ISO/IEC 27017, ISO/IEC 27018 and other standards and regulations relate to each other
- Interpret the guidance of ISO/IEC 27017 and ISO/IEC 27018 for a specific organization
- Plan, implement, manage, monitor and maintain a cloud security program
- Advise organizations on managing a cloud security program using best practices
Educational Approach
- Essay-type exercises, multiple-choice quizzes and examples of cloud security best practices
- Exercises based on a case study
- Quizzes structured like the certification exam
Prerequisites
A fundamental knowledge of ISO/IEC 27017 and ISO/IEC 27018, and general knowledge of cloud computing concepts.
Course Agenda
The topics follow PECB's five-day plan for this course. At your own pace, you work through them in this order.
- Day 1: Introduction to ISO/IEC 27017 and ISO/IEC 27018, and initiation of a cloud security program
- Day 2: Cloud computing security risk management and cloud-specific controls
- Day 3: Documented information management, and cloud security awareness and training
- Day 4: Cloud security incident management, testing, monitoring and continual improvement
- Day 5: Certification exam
Examination
The PECB Lead Cloud Security Manager exam covers seven competency domains:
- Domain 1: Fundamental principles and concepts of cloud computing
- Domain 2: Information security policy for cloud computing and management of documented information
- Domain 3: Cloud computing security risk management
- Domain 4: Cloud-specific controls based on ISO/IEC 27017, ISO/IEC 27018 and best practices
- Domain 5: Cloud security awareness, training, roles and responsibilities
- Domain 6: Cloud security incident management
- Domain 7: Cloud security testing, monitoring and continual improvement
PECB's list of exams gives the exam type, duration and available languages.
Certification Requirements
After you pass the exam, you apply for the credential that matches your experience. Every level requires a pass on the PECB Lead Cloud Security Manager exam, or an equivalent, and a signed PECB Code of Ethics.
| Credential | Professional experience | Cloud security project experience |
|---|---|---|
| PECB Certified Provisional Cloud Security Manager | None | None |
| PECB Certified Cloud Security Manager | 2 years, including 1 year in cloud security | 200 hours |
| PECB Certified Lead Cloud Security Manager | 5 years, including 2 years in cloud security | 300 hours |
| PECB Certified Senior Lead Cloud Security Manager | 10 years, including 7 years in cloud security | 1,000 hours |
Project experience can include implementing or managing a cloud security program, managing documented information in the cloud, monitoring cloud security performance and managing a cloud security team.
Questions About Enrolling
Does passing the exam make me certified?
Passing the exam lets you apply for a PECB credential, and PECB reviews your application. Foundation credentials are open to everyone who passes the exam and signs the PECB Code of Ethics. For Lead Implementer, Lead Auditor and Lead Manager courses, PECB awards the level that matches your experience. If you are new to the field, you start at the Provisional level and can apply to upgrade as you gain experience. Each course page lists the requirements for every level.
Can I add a portfolio program?
Yes, with ISO/IEC 27001 Foundation, ISO/IEC 27001 Lead Implementer and ISO/IEC 42001 Lead Implementer. Each portfolio program is a separate Tech Academy program with its own price and enrollment.
Explore the portfolio programs and find the one for your courseDo I need a portfolio program to get exam support?
Exam support, including office hours every two weeks for 90 days from enrollment, comes with the ISO/IEC 27001 and ISO/IEC 42001 courses themselves. Portfolio programs are an optional extra, sold separately.
Can I join a portfolio program if I trained with another provider?
Yes. Each portfolio program is sold on its own, for anyone who is taking or has completed the matching training.
