Weekend batches
October 2026
09:00–15:00 · flexible hours
$799per learner
24 Oct 2026
4 of 25 seats available
31 Oct 2026
10 of 25 seats available
IT Security and Governance
Certificate of Cloud Auditing Knowledge (CCAK) Training in China
Certificate of Cloud Auditing Knowledge (CCAK) Training in China develops expertise in cloud governance, compliance, risk management, cloud security auditing, CCM, CAIQ, continuous assurance, and CSA STAR. Build practical knowledge to assess cloud environments, evaluate security controls, strengthen compliance programs, and support cloud audit and assurance activities with vendor-neutral cloud security and auditing skills.
40 Hours/5 daysIntermediate3.9 · 2,900 reviews
Training calendar
Upcoming four-month course schedule
A new weekday and weekend batch starts every week. Each batch runs for 5 training days, based on the course duration of 40 Hours/5 days.
Weekend batches
November 2026
09:00–15:00 · flexible hours
$799per learner
07 Nov 2026
25 of 25 seats available
14 Nov 2026
25 of 25 seats available
21 Nov 2026
25 of 25 seats available
28 Nov 2026
25 of 25 seats available
Weekend batches
December 2026
09:00–15:00 · flexible hours
$799per learner
05 Dec 2026
25 of 25 seats available
12 Dec 2026
25 of 25 seats available
19 Dec 2026
25 of 25 seats available
26 Dec 2026
25 of 25 seats available
Weekend batches
January 2027
09:00–15:00 · flexible hours
$799per learner
02 Jan 2027
25 of 25 seats available
09 Jan 2027
25 of 25 seats available
16 Jan 2027
25 of 25 seats available
23 Jan 2027
25 of 25 seats available
30 Jan 2027
25 of 25 seats available
Course curriculum
What you’ll learn
40 Hours/5 daysIntermediate
- Module 1: Cloud Governance
- Overview of cloud governance and assurance
- Cloud governance frameworks and principles
- Cloud risk management
- Cloud governance tools and accountability
- Security, transparency, and assurance in cloud environments
- Module 2: Cloud Compliance Program
- Designing and building cloud compliance programs
- Legal, regulatory, and contractual requirements
- Security standards and compliance frameworks
- Identifying controls and measuring control effectiveness
- CSA certification, attestation, and validation
- Module 3: CCM and CAIQ – Goals, Objectives and Structure
- Cloud Controls Matrix (CCM) fundamentals
- Consensus Assessments Initiative Questionnaire (CAIQ)
- CCM and CAIQ objectives and structure
- Standards mapping and compliance gap analysis
- Understanding CCM evolution and control assessment
- Module 4: Cloud Threat Analysis Methodology Using CCM
- Cloud threat analysis concepts and objectives
- Understanding attack details and potential impacts
- Identifying mitigating security controls
- Security metrics and control effectiveness
- Applying CCM-based threat analysis to cloud scenarios
- Module 5: Evaluating a Cloud Compliance Program
- Cloud compliance program evaluation approaches
- Governance and risk perspectives
- Legal, regulatory, and standards-based evaluation
- Assessing changes in cloud services
- Continuous assurance and continuous compliance requirements
- Module 6: Cloud Auditing
- Cloud audit characteristics, criteria, and principles
- Auditing standards for cloud computing
- Differences between traditional and cloud-based IT audits
- Assessing cloud services and cloud delivery models
- Cloud audit planning, execution, and documentation
- Module 7: CCM – Auditing Controls
- CCM audit scoping guidance
- CCM risk evaluation methodology
- Cloud control assessment and audit preparation
- CCM audit workbook
- Practical CCM control auditing examples
- Module 8: Continuous Assurance and Compliance
- Continuous assurance and continuous compliance
- DevOps and DevSecOps environments
- Auditing CI/CD pipelines
- Security automation and continuous monitoring
- DevSecOps maturity and cloud audit considerations
- Module 9: CSA STAR Program
- Security and privacy standards
- CSA STAR Program fundamentals
- Open Certification Framework
- STAR Registry and transparency
- STAR Levels 1, 2, and 3
Entry requirements and prerequisites
- Basic Cloud Computing Knowledge
A foundational understanding of cloud computing concepts, service models, deployment models, and cloud environments is recommended for learners joining CCAK training. - Understanding of Cloud Security Fundamentals
Familiarity with basic cloud security concepts, security controls, data protection, shared responsibility, and common cloud risks can help learners understand CCAK topics more effectively . - IT Audit or Compliance Knowledge
Basic knowledge of IT auditing, security assessments, compliance, governance, risk management, or internal controls is beneficial for professionals pursuing cloud auditing skills. - Knowledge of Information Security
Familiarity with information security principles, security policies, risk assessment, control frameworks, and cybersecurity practices is recommended for this intermediate-to-advanced training. - Cloud Governance Awareness
An understanding of organizational governance, regulatory requirements, security policies, and compliance practices can help learners apply cloud governance and assurance concepts effectively. - Recommended Cloud Security Background
There are no mandatory prerequisites for the CCAK credential. However, CSA has previously recommended a working knowledge of cloud security best practices and suggested CCSK as useful foundational preparation before pursuing CCAK.
Career value
Reasons to choose this course
Build Cloud Auditing Expertise
Develop specialized knowledge of cloud auditing principles, assurance practices, and security controls to strengthen your cloud audit and compliance career.
Master Cloud Security Governance
Learn how cloud governance, risk management, compliance, and shared responsibility models support secure cloud adoption and strengthen your professional profile.
Develop CCM and CAIQ Skills
Gain practical understanding of the Cloud Controls Matrix (CCM) and CAIQ for assessing cloud security controls, compliance requirements, and cloud provider security posture.
Strengthen Cloud Compliance Knowledge
Understand cloud compliance programs, control assessment, continuous assurance, and security requirements to support governance and regulatory initiatives.
Expand Cloud Security Career Opportunities
Build vendor-neutral cloud auditing and assurance knowledge relevant to cloud security auditors, GRC professionals, compliance managers, security consultants, and security leaders.
Enhance Risk and Assurance Capabilities
Develop the ability to evaluate cloud security risks, assess controls, and support evidence-based assurance activities, helping you contribute more effectively to cloud security programs.
Advantages
Turn learning into practical capability
Vendor-Neutral Cloud Security Knowledge
Gain cloud auditing knowledge based on vendor-neutral security principles, helping you understand security requirements across different cloud environments and technologies.
Practical Cloud Control Assessment
Learn how cloud security controls can be evaluated using frameworks such as the CSA Cloud Controls Matrix, supporting structured assessment and assurance activities.
Improved Governance and Compliance Skills
Strengthen your understanding of cloud governance, compliance programs, risk management, and control effectiveness to support enterprise security and GRC initiatives.
Understanding of CSA Security Frameworks
Develop knowledge of CCM, CAIQ, continuous assurance, and the CSA STAR ecosystem, giving you a stronger foundation for cloud security assessment and compliance work.
Better Cloud Audit Readiness
Learn cloud-focused audit concepts and assessment approaches that can help security and audit professionals evaluate cloud environments and document control effectiveness.
Supports Career Growth in Cloud GRC
Combine cloud security, auditing, governance, risk, and compliance knowledge to pursue or strengthen career paths in cloud audit, GRC, compliance, security assurance, and cloud security consulting.
Exam format & assessment
- Certification: Certificate of Cloud Auditing Knowledge (CCAK)
- Exam Format: Multiple-choice questions
- Number of Questions: 76
- Exam Duration: 2 hours (120 minutes)
- Passing Score: 70%
- Exam Language: English
- Prerequisites: None
- Exam Price: US$395 for ISACA members / US$495 for non-members
- Key Exam Domains: Cloud Governance, Cloud Compliance, CCM & CAIQ, Cloud Threat Analysis, Cloud Compliance Program Evaluation, Cloud Auditing, CCM Auditing Controls, Continuous Assurance & Compliance, and CSA STAR Program.
Bring your learning together
Course conclusion
Certificate of Cloud Auditing Knowledge (CCAK) Training in China develops specialized knowledge of cloud governance, compliance, auditing, risk management, security controls, continuous assurance, and cloud security assessment. Learners gain a strong understanding of cloud-specific auditing practices, CCM, CAIQ, threat analysis, and CSA STAR concepts. The course is designed to strengthen the capabilities of IT auditors, cloud security professionals, GRC specialists, risk professionals, and compliance teams working with modern cloud environments. CCAK provides vendor-neutral knowledge that can complement broader cloud security, audit, governance, and risk-management expertise.
Target audience
- Cloud Security and IT Professionals
- Cloud Auditors and IT Auditors
- GRC, Risk and Compliance Professionals
- Cloud Security Consultants and Managers
- Security and Privacy Professionals
- CISOs and Security Decision-Makers
Verified learning evidence
Expertise, recognition and learner outcomes
Course-specific expertise
- 10+ years of industry experience in cloud security, IT audit, governance, risk, compliance, and cybersecurity.
- 500+ hours of training delivered to professionals, teams, and certification candidates.
- Hands-on expertise in cloud auditing, compliance assessments, security controls, risk management, and cloud governance frameworks.
- Experience training professionals from IT Services, Banking & Financial Services, Healthcare, Telecommunications, E-commerce, Manufacturing, Government, and Technology industries.
- Practical knowledge of CSA Cloud Controls Matrix (CCM), CAIQ, cloud governance, audit planning, compliance monitoring, and security assessment methodologies.
- Focus on real-world audit scenarios, practical case studies, industry best practices, and certification-oriented learning.
- Trainers help candidates connect CCAK concepts with real-world cloud security, audit, risk, and compliance responsibilities.
Documented learner outcomes
- Problem Statement: Organizations increasingly rely on cloud environments but face challenges in auditing security controls, managing compliance requirements, assessing risks, and validating cloud governance practices.
Traditional audit approaches may not fully address the shared responsibility model, cloud-specific risks, and continuously changing cloud environments. - How We Overcame the Problem: Learners applied CCAK concepts to understand cloud auditing methodologies, governance requirements, risk assessment, and security controls using industry-relevant scenarios.
They used CSA Cloud Controls Matrix (CCM), CAIQ, and cloud audit principles to structure cloud security and compliance assessments. - Overall Implementation: Learners implemented an end-to-end cloud auditing workflow covering audit planning, scope definition, control identification, evidence collection, risk assessment, compliance evaluation, findings, and reporting.
The implementation connected cloud governance and security requirements with practical auditing activities. - Evidence of Learning: Learners demonstrated the ability to identify applicable cloud controls, map requirements to CSA CCM, evaluate audit evidence, identify control gaps, and document audit observations.
They also demonstrated their understanding through practical exercises, case studies, assessments, and audit-based scenarios. - Cloud Auditing Workflow:
Cloud Environment → Audit Scope → Risk Assessment → Control Mapping → Evidence Collection → Control Evaluation → Gap Identification → Audit Findings → Compliance Report - CSA Cloud Controls Matrix (CCM) Implementation: Learners mapped cloud security and compliance requirements to relevant CCM controls across areas such as governance, data security, identity management, and infrastructure security.
This helped them understand how standardized cloud controls can support structured security assessments. - CAIQ Implementation: Learners used the Consensus Assessments Initiative Questionnaire (CAIQ) to understand how cloud service providers can be evaluated against security and compliance requirements.
They analyzed questionnaire responses and identified areas requiring additional evidence, clarification, or risk assessment. - Cloud Risk Assessment: Learners assessed risks associated with cloud services, data protection, access management, third-party dependencies, and shared responsibilities.
They prioritized identified risks based on potential business impact and recommended appropriate controls or mitigation measures. - Audit Evidence Evaluation: Learners reviewed examples of policies, procedures, access controls, security configurations, compliance records, and other audit evidence.
They evaluated whether available evidence adequately supported the effectiveness and implementation of required cloud controls. - Problem-Solving Evidence: Learners addressed challenges such as unclear responsibilities, insufficient audit evidence, control gaps, compliance requirements, and cloud-specific security risks.
They applied structured audit methodologies, control mapping, risk analysis, and evidence evaluation to develop appropriate recommendations. - Comparative Evidence: Learners compared cloud auditing requirements across different cloud environments and evaluated how governance, security controls, compliance obligations, and shared responsibility can vary.
This strengthened their ability to adapt auditing approaches to different organizational and cloud-service scenarios. - Overall Outcome: By completing the implementation, learners demonstrated practical knowledge of cloud auditing, governance, risk management, compliance, control assessment, and security assurance.
The acquired skills can support cloud audit, cloud security, GRC, compliance, and risk-management activities. - Final Evidence: A completed cloud audit case study, audit scope, risk assessment, CCM control mapping, CAIQ analysis, evidence evaluation, identified findings, remediation recommendations, and audit report provide evidence of the learner's practical CCAK competency.
Helpful answers for planning your training
Frequently asked questions
CCAK stands for Certificate of Cloud Auditing Knowledge. It focuses on the principles and practices required to understand and assess cloud computing systems, including cloud governance, compliance, auditing, assurance, and security controls.
The CCAK knowledge areas include cloud governance, cloud compliance programs, CCM and CAIQ, cloud threat analysis, cloud auditing, compliance program evaluation, CCM auditing, continuous assurance and compliance, and the CSA STAR Program.
Learner reviews
Rated by 2,900 learners
Rating and review totals are controlled per course in the CRM.
3.9out of 5
Popular cities in China
Compare city information, course curriculum, exam details and ways to enquire.
Book with clarity
Clear pricing, protected approval and learner support
Approval before payment
A secure payment link is shared only after the CRM team confirms the request.
Live instructor-led delivery
Ask questions during the session and learn alongside a scheduled cohort.
Verified learner feedback
Published course feedback is linked to completed learner records and CRM approval.
Visible schedules
Review weekday and weekend dates, duration, timezone and seat availability before booking.