Cargando…
CCSK Certificate of Cloud Security Knowledge All-in-One Exam Guide
Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product. This effective study guide provides 100% coverage of every topic on the challenging CCSK exam from the Clo...
| Clasificación: | Libro Electrónico |
|---|---|
| Autor principal: | |
| Autor Corporativo: | |
| Formato: | Electrónico eBook |
| Idioma: | Inglés |
| Publicado: |
McGraw-Hill,
2020.
|
| Edición: | 1st edition. |
| Temas: | |
| Acceso en línea: | Texto completo (Requiere registro previo con correo institucional) |
Tabla de Contenidos:
- Cover
- About the Author
- Title Page
- Copyright Page
- Dedication
- Contents at a Glance
- Contents
- Foreword
- Acknowledgments
- Introduction
- Chapter 1 Cloud Computing Concepts and Architectures
- Cloud Logical Model
- Infrastructure
- Metastructure
- Infostructure
- Applistructure
- Cloud Computing Definitions
- Essential Characteristics
- Cloud Service Models
- Cloud Deployment Models
- Cloud Security Scope and the Shared Responsibility Model
- Shared Responsibility Model
- Cloud Security Alliance Tools
- Cloud Controls Matrix
- Consensus Assessments Initiative Questionnaire
- STAR Registry
- Cloud Reference and Architecture Models
- Chapter Review
- Questions
- Answers
- Chapter 2 Governance and Enterprise Risk Management
- Governance
- Governance Backgrounder
- Cloud Governance
- Risk Management
- Risk Management Backgrounder
- Cloud Risk Management
- The Effects of Service and Deployment Models
- Cloud Risk Management Trade-Offs
- Assessing Cloud Service Providers
- Chapter Review
- Questions
- Answers
- Chapter 3 Legal Issues, Contracts, and Electronic Discovery
- Legal Frameworks Governing Data Protection and Privacy
- Required Security Measures
- Treaties
- Restrictions to Cross-Border Data Transfers
- CLOUD Act
- Regional Examples
- Asia Pacific Region
- European Union and European Economic Area
- The Americas
- Contracts and Provider Selection
- Internal Due Diligence
- Monitoring, Testing, and Updating
- External Due Diligence
- Contract Negotiations
- Third-Party Audits and Attestations
- Electronic Discovery
- Possession, Custody, and Control
- Relevant Cloud Applications and Environment
- Searchability and E-Discovery Tools
- Preservation
- Data Retention Laws and Recordkeeping Obligations
- Data Collection
- Forensics
- Reasonable Integrity
- Direct Access
- Native Production
- Authentication
- Cooperation Between Provider and Client in E-Discovery
- Response to a Subpoena or Search Warrant
- Chapter Review
- Questions
- Answers
- Chapter 4 Compliance and Audit Management
- Compliance Backgrounder
- Impact of the Cloud on Contracts
- How the Cloud Changes Compliance
- Compliance Inheritance
- Continuous Compliance
- Audit Backgrounder
- Audit Management in the Cloud
- SOC Reports and ISO Certifications Backgrounder
- SOC Backgrounder
- ISO Backgrounder
- How the Cloud Changes Audits
- Right to Audit
- Audit Scope
- Auditor Requirements
- Chapter Review
- Questions
- Answers
- Chapter 5 Information Governance
- Cloud Information Governance Domains
- Information Classification Backgrounder
- Information Management Backgrounder
- The Data Security Lifecycle
- Locations and Entitlements
- Functions, Actors, and Controls
- Chapter Review
- Questions
- Answers
- Chapter 6 Management Plane and Business Continuity
- Management Plane