CCSP Domain 4 | Cloud Application Security
#ccsp #ccsptraining #cloudsecurity
I'll explain CCSP domain 4 in-depth in this video. The following topics are covered in this video.
Advocate Training and Awareness for Application Security
» Cloud Development Basics
» Common Pitfalls
» Common Cloud Vulnerabilities
Describe the Secure Software Development Life Cycle (SDLC) Process
» Business Requirements
» Phases and Methodologies
Apply the Secure Software Development Life Cycle (SDLC)
» Avoid Common Vulnerabilities During
Development
» Cloud-specific Risks
» Quality Assurance
» Threat Modeling
» Software Configuration Management and
Versioning
Apply Cloud Software Assurance and Validation
» Functional Testing
» Security Testing Methodologies
Use Verified Secure Software
» Approved Application Programming Interfaces (API)
» Supply-chain Management
» Third Party Software Management
» Validated Open Source Software
Comprehend the Specifics of Cloud Application Architecture
» Supplemental Security components (e.g., Web Application Firewall (WAF), Database Activity Monitoring
(DAM), Extensible Markup Language (XML) firewalls, Application Programming Interface (API) gateway)
» Cryptography
» Sandboxing
» Application Virtualization and Orchestration
Design Appropriate Identity and Access Management (IAM) Solutions
» Federated Identity
» Identity Providers
» Single Sign-On (SSO)
» Multi-factor Authentication
» Cloud Access Security Broker (CASB)
Link to ENISA cloud risks guide -
https://www.enisa.europa.eu/publicati...
Tags
cloud security in cloud computing
cloud security course
data security in cloud
cloud security course free
ccsp training videos
ccsp training online
ccsp training material
ccsp 2021
ccsp study
ccsp study tips
ccsp study plan
ccsp touchpoint
For regular tips and information, please connect
Twitter - / kd_cybertalks
Linkedin - / kd-cybertalks-39031a20a