Birmingham, United Kingdom

IT Security and Governance

Certificate of Cloud Auditing Knowledge (CCAK) Trainingin Birmingham

Certificate of Cloud Auditing Knowledge (CCAK) Training in Birmingham, United Kingdom develops expertise in cloud governance, compliance, risk management, cloud security auditing, CCM, CAIQ, continuous assurance, and CSA STAR. Build…

40 Hours/5 daysLive virtual trainingIntermediate

Classroom training and venue arrangements depend on the availability of a suitable conference hall in Birmingham, United Kingdom. Dates, seating capacity, facilities and the final venue are confirmed before booking.

Learning in Birmingham, United Kingdom

City details

Birmingham offers a strong professional community, cultural heritage and accessible learning opportunities.

City speciality

Business, education and cultural heritage

Classroom availability and venue

Classroom training and venue arrangements depend on the availability of a suitable conference hall in Birmingham, United Kingdom. Dates, seating capacity, facilities and the final venue are confirmed before booking.

Build your understanding

Explore Certificate of Cloud Auditing Knowledge (CCAK) Training

Certificate of Cloud Auditing Knowledge (CCAK) Training in Birmingham, United Kingdom develops expertise in cloud governance, compliance, risk management, cloud security auditing, CCM, CAIQ, continuous assurance, and CSA STAR. Build practical knowledge to assess cloud environments, evaluate security controls, strengthen compliance programs, and support cloud audit and assurance activities with vendor-neutral cloud security and auditing skills.

View the complete course information

Your learning location

Learning from Birmingham

Birmingham offers a strong professional community, cultural heritage and accessible learning opportunities.

Make your learning count

City-page course benefits

  • Build Cloud Auditing Expertise
    Develop practical knowledge of cloud auditing principles, assessment methods, audit planning, and cloud-specific controls to strengthen your professional capabilities.
  • Master Cloud Governance and Risk Management
    Learn cloud governance frameworks, assurance practices, risk management approaches, and governance tools to support secure and accountable cloud adoption.
  • Strengthen Cloud Compliance Skills
    Understand cloud compliance programs, regulatory requirements, security frameworks, control objectives, and control effectiveness to support compliance initiatives.
  • Learn CSA Cloud Control Matrix and CAIQ
    Gain knowledge of the Cloud Controls Matrix (CCM) and Consensus Assessments Initiative Questionnaire (CAIQ) for evaluating cloud security controls and conducting structured assessments.
  • Enhance Cloud Security Assessment Capabilities
    Build skills for assessing cloud services, identifying security risks, evaluating controls, and understanding the differences between traditional and cloud-based auditing environments.
  • Develop Continuous Assurance Knowledge
    Learn how continuous assurance, continuous compliance, DevSecOps, automation, and cloud-native development influence modern cloud auditing and security governance.
  • Understand Cloud Threat Analysis
    Explore cloud threat analysis methodologies, attack impacts, mitigating controls, and security metrics to support risk-based cloud security assessments.
  • Advance Cloud Security and Audit Career Skills
    Build vendor-neutral cloud auditing, governance, compliance, and assurance knowledge that can complement existing IT audit, cybersecurity, risk, and cloud security expertise.

Course curriculum

  • Module 1: Cloud Governance
    • Overview of cloud governance and assurance
    • Cloud governance frameworks and principles
    • Cloud risk management
    • Cloud governance tools and accountability
    • Security, transparency, and assurance in cloud environments
  • Module 2: Cloud Compliance Program
    • Designing and building cloud compliance programs
    • Legal, regulatory, and contractual requirements
    • Security standards and compliance frameworks
    • Identifying controls and measuring control effectiveness
    • CSA certification, attestation, and validation
  • Module 3: CCM and CAIQ – Goals, Objectives and Structure
    • Cloud Controls Matrix (CCM) fundamentals
    • Consensus Assessments Initiative Questionnaire (CAIQ)
    • CCM and CAIQ objectives and structure
    • Standards mapping and compliance gap analysis
    • Understanding CCM evolution and control assessment
  • Module 4: Cloud Threat Analysis Methodology Using CCM
    • Cloud threat analysis concepts and objectives
    • Understanding attack details and potential impacts
    • Identifying mitigating security controls
    • Security metrics and control effectiveness
    • Applying CCM-based threat analysis to cloud scenarios
  • Module 5: Evaluating a Cloud Compliance Program
    • Cloud compliance program evaluation approaches
    • Governance and risk perspectives
    • Legal, regulatory, and standards-based evaluation
    • Assessing changes in cloud services
    • Continuous assurance and continuous compliance requirements
  • Module 6: Cloud Auditing
    • Cloud audit characteristics, criteria, and principles
    • Auditing standards for cloud computing
    • Differences between traditional and cloud-based IT audits
    • Assessing cloud services and cloud delivery models
    • Cloud audit planning, execution, and documentation
  • Module 7: CCM – Auditing Controls
    • CCM audit scoping guidance
    • CCM risk evaluation methodology
    • Cloud control assessment and audit preparation
    • CCM audit workbook
    • Practical CCM control auditing examples
  • Module 8: Continuous Assurance and Compliance
    • Continuous assurance and continuous compliance
    • DevOps and DevSecOps environments
    • Auditing CI/CD pipelines
    • Security automation and continuous monitoring
    • DevSecOps maturity and cloud audit considerations
  • Module 9: CSA STAR Program
    • Security and privacy standards
    • CSA STAR Program fundamentals
    • Open Certification Framework
    • STAR Registry and transparency
    • STAR Levels 1, 2, and 3

Exam details

  • Certification: Certificate of Cloud Auditing Knowledge (CCAK)
  • Exam Format: Multiple-choice questions
  • Number of Questions: 76
  • Exam Duration: 2 hours (120 minutes)
  • Passing Score: 70%
  • Exam Language: English
  • Prerequisites: None
  • Exam Price: US$395 for ISACA members / US$495 for non-members
  • Key Exam Domains: Cloud Governance, Cloud Compliance, CCM & CAIQ, Cloud Threat Analysis, Cloud Compliance Program Evaluation, Cloud Auditing, CCM Auditing Controls, Continuous Assurance & Compliance, and CSA STAR Program.

Plan your learning

Who this course is for

Cloud Security and IT Professionals Cloud Auditors and IT Auditors GRC, Risk and Compliance Professionals Cloud Security Consultants and Managers Security and Privacy Professionals CISOs and Security Decision-Makers

Before you begin

Basic Cloud Computing Knowledge A foundational understanding of cloud computing concepts, service models, deployment models, and cloud environments is recommended for learners joining CCAK training . Understanding of Cloud Security Fundamentals Familiarity with basic cloud security concepts, security controls, data protection, shared responsibility, and common cloud risks can help learners understand CCAK topics more effectively . IT Audit or Compliance Knowledge Basic knowledge of IT auditing, security assessments, compliance, governance, risk management, or internal controls is beneficial for professionals pursuing cloud auditing skills. Knowledge of Information Security Familiarity with…

Learning outcomes

Problem Statement: Organizations increasingly rely on cloud environments but face challenges in auditing security controls, managing compliance requirements, assessing risks, and validating cloud governance practices. Traditional audit approaches may not fully address the shared responsibility model, cloud-specific risks, and continuously changing cloud environments. How We Overcame the Problem: Learners applied CCAK concepts to understand cloud auditing methodologies, governance requirements, risk assessment, and security controls using industry-relevant scenarios. They used CSA Cloud Controls Matrix (CCM), CAIQ, and cloud audit principles to structure cloud security and compliance…

Continue exploring

Insights for Certificate of Cloud Auditing Knowledge (CCAK) Training

Explore this course locally