Certificate of Cloud Auditing Knowledge (CCAK) Trainingin Boston

40 Hours/5 daysLive virtual trainingIntermediate

Classroom training and venue arrangements depend on the availability of a suitable conference hall in Boston, United States. Dates, seating capacity, facilities and the final venue are confirmed before booking.

Learning in Boston, United States

City details

Boston is known for diverse industries, professional networks and internationally connected business communities.

City speciality

Industry, innovation and professional networks

Classroom availability and venue

Build your understanding

Explore Certificate of Cloud Auditing Knowledge (CCAK) Training

Certificate of Cloud Auditing Knowledge (CCAK) Training in Boston, United States develops expertise in cloud governance, compliance, risk management, cloud security auditing, CCM, CAIQ, continuous assurance, and CSA STAR. Build practical knowledge to assess cloud environments, evaluate security controls, strengthen compliance programs, and support cloud audit and assurance activities with vendor-neutral cloud security and auditing skills.

View the complete course information

Your learning location

Learning from Boston

Boston is known for diverse industries, professional networks and internationally connected business communities.

Make your learning count

City-page course benefits

Build Cloud Auditing Expertise
Develop practical knowledge of cloud auditing principles, assessment methods, audit planning, and cloud-specific controls to strengthen your professional capabilities.
Master Cloud Governance and Risk Management
Learn cloud governance frameworks, assurance practices, risk management approaches, and governance tools to support secure and accountable cloud adoption.
Strengthen Cloud Compliance Skills
Understand cloud compliance programs, regulatory requirements, security frameworks, control objectives, and control effectiveness to support compliance initiatives.
Learn CSA Cloud Control Matrix and CAIQ
Gain knowledge of the Cloud Controls Matrix (CCM) and Consensus Assessments Initiative Questionnaire (CAIQ) for evaluating cloud security controls and conducting structured assessments.
Enhance Cloud Security Assessment Capabilities
Build skills for assessing cloud services, identifying security risks, evaluating controls, and understanding the differences between traditional and cloud-based auditing environments.
Develop Continuous Assurance Knowledge
Learn how continuous assurance, continuous compliance, DevSecOps, automation, and cloud-native development influence modern cloud auditing and security governance.
Understand Cloud Threat Analysis
Explore cloud threat analysis methodologies, attack impacts, mitigating controls, and security metrics to support risk-based cloud security assessments.
Advance Cloud Security and Audit Career Skills
Build vendor-neutral cloud auditing, governance, compliance, and assurance knowledge that can complement existing IT audit, cybersecurity, risk, and cloud security expertise.

Course curriculum

Module 1: Cloud Governance
- Overview of cloud governance and assurance
- Cloud governance frameworks and principles
- Cloud risk management
- Cloud governance tools and accountability
- Security, transparency, and assurance in cloud environments
Module 2: Cloud Compliance Program
- Designing and building cloud compliance programs
- Legal, regulatory, and contractual requirements
- Security standards and compliance frameworks
- Identifying controls and measuring control effectiveness
- CSA certification, attestation, and validation
Module 3: CCM and CAIQ – Goals, Objectives and Structure
- Cloud Controls Matrix (CCM) fundamentals
- Consensus Assessments Initiative Questionnaire (CAIQ)
- CCM and CAIQ objectives and structure
- Standards mapping and compliance gap analysis
- Understanding CCM evolution and control assessment
Module 4: Cloud Threat Analysis Methodology Using CCM
- Cloud threat analysis concepts and objectives
- Understanding attack details and potential impacts
- Identifying mitigating security controls
- Security metrics and control effectiveness
- Applying CCM-based threat analysis to cloud scenarios
Module 5: Evaluating a Cloud Compliance Program
- Cloud compliance program evaluation approaches
- Governance and risk perspectives
- Legal, regulatory, and standards-based evaluation
- Assessing changes in cloud services
- Continuous assurance and continuous compliance requirements
Module 6: Cloud Auditing
- Cloud audit characteristics, criteria, and principles
- Auditing standards for cloud computing
- Differences between traditional and cloud-based IT audits
- Assessing cloud services and cloud delivery models
- Cloud audit planning, execution, and documentation
Module 7: CCM – Auditing Controls
- CCM audit scoping guidance
- CCM risk evaluation methodology
- Cloud control assessment and audit preparation
- CCM audit workbook
- Practical CCM control auditing examples
Module 8: Continuous Assurance and Compliance
- Continuous assurance and continuous compliance
- DevOps and DevSecOps environments
- Auditing CI/CD pipelines
- Security automation and continuous monitoring
- DevSecOps maturity and cloud audit considerations
Module 9: CSA STAR Program
- Security and privacy standards
- CSA STAR Program fundamentals
- Open Certification Framework
- STAR Registry and transparency
- STAR Levels 1, 2, and 3

Exam details

Certification: Certificate of Cloud Auditing Knowledge (CCAK)
Exam Format: Multiple-choice questions
Number of Questions: 76
Exam Duration: 2 hours (120 minutes)
Passing Score: 70%
Exam Language: English
Prerequisites: None
Exam Price: US$395 for ISACA members / US$495 for non-members
Key Exam Domains: Cloud Governance, Cloud Compliance, CCM & CAIQ, Cloud Threat Analysis, Cloud Compliance Program Evaluation, Cloud Auditing, CCM Auditing Controls, Continuous Assurance & Compliance, and CSA STAR Program.

Plan your learning

Who this course is for

Cloud Security and IT Professionals Cloud Auditors and IT Auditors GRC, Risk and Compliance Professionals Cloud Security Consultants and Managers Security and Privacy Professionals CISOs and Security Decision-Makers

Before you begin

Basic Cloud Computing Knowledge A foundational understanding of cloud computing concepts, service models, deployment models, and cloud environments is recommended for learners joining CCAK training . Understanding of Cloud Security Fundamentals Familiarity with basic cloud security concepts, security controls, data protection, shared responsibility, and common cloud risks can help learners understand CCAK topics more effectively . IT Audit or Compliance Knowledge Basic knowledge of IT auditing, security assessments, compliance, governance, risk management, or internal controls is beneficial for professionals pursuing cloud auditing skills. Knowledge of Information Security Familiarity with…

Learning outcomes

Problem Statement: Organizations increasingly rely on cloud environments but face challenges in auditing security controls, managing compliance requirements, assessing risks, and validating cloud governance practices. Traditional audit approaches may not fully address the shared responsibility model, cloud-specific risks, and continuously changing cloud environments. How We Overcame the Problem: Learners applied CCAK concepts to understand cloud auditing methodologies, governance requirements, risk assessment, and security controls using industry-relevant scenarios. They used CSA Cloud Controls Matrix (CCM), CAIQ, and cloud audit principles to structure cloud security and compliance…

Prefer a course discussion? Schedule a meeting

Room facilities / classroom arrangements

General planning information. Availability is confirmed for your selected venue and batch.

Typical classroom arrangements — subject to confirmation for the selected batch: 1. Learning space and seating: A suitable room layout with seating and desk space for course discussions and exercises. 2. Presentation equipment: A display or projector for instructor-led explanations; equipment requirements are confirmed before delivery. 3. Internet and power: Connectivity and charging access where needed for the course’s digital resources or labs. 4. Collaboration tools: A whiteboard or flip chart for group activities, demonstrations and note-taking. 5. Room comfort: Appropriate lighting and ventilation, with breaks included in the agreed training schedule. 6. Access and learner needs: Accessibility, refreshments and any specific accommodation requirements should be discussed with the adviser in advance. This is general planning information. It does not confirm a particular venue, equipment package or included refreshments.

Course expertise

10+ years of industry experience in cloud security, IT audit, governance, risk, compliance, and cybersecurity. 500+ hours of training delivered to professionals, teams, and certification candidates. Hands-on expertise in cloud auditing, compliance assessments, security controls, risk management, and cloud governance frameworks . Experience training professionals from IT Services, Banking & Financial Services, Healthcare, Telecommunications, E-commerce, Manufacturing, Government, and Technology industries. Practical knowledge of CSA Cloud Controls Matrix (CCM), CAIQ, cloud governance, audit planning, compliance monitoring, and security assessment methodologies . Focus on real-world audit…

Continue exploring

Insights for Certificate of Cloud Auditing Knowledge (CCAK) Training

Learning insight 01

Certificate of Cloud Auditing Knowledge (CCAK) Certification Training: Complete Guide to Cloud Auditing, Governance & Compliance

As organizations increasingly move applications, data, infrastructure, and business processes to cloud platforms, traditional security and auditing approaches need to adapt to cloud-specific risks. Certificate of Cloud Auditing Knowledge (CCAK) Certification Training is designed to develop specialized knowledge of…

Read the full article

Explore this course locally

New York Chicago Los Angeles San Francisco