CCSK study materials
CCSK study resources

CCSK case studies

CCSK · Put your knowledge to work in context.

The Certificate of Cloud Security Knowledge (CCSK) is a cloud security credential from the Cloud Security Alliance, described by CSA as the industry benchmark for cloud security expertise. CCSK v5 is aimed at IT professionals working in cloud computing, including security staff, developers, IT operations staff, audit and compliance professionals, sales and solution engineers, and product marketers. The CCSK case studies are 5 cases and about 3,492 words.

1

Tokenized Payment Data in a Multi-Region SaaS Platform

A multi-tenant SaaS provider processes payments for EU retailers. The CRM stores customer names, emails, partial addresses, and payment tokens; the card-number vault is a separate, PCI-scoped service that returns a token and never the card number.

715 words, about 4 min
2

Standing Privilege and Access Review Fatigue in a 61-Account Estate

A 4,200-employee firm federates to a single identity provider; its AWS estate grew from 3 accounts to 61 in four years. It now has 180 IAM roles and 900 trust policies.

661 words, about 3 min
3

Ransomware Recovery When the Attacker Held Admin for Two Weeks

An attacker using stolen administrator credentials spent two weeks inside a production AWS account running a 200-instance order platform. On detection, the on-call engineer terminated every instance and deleted the access keys; the platform was serving again in 40 minutes.

698 words, about 3 min
4

Overlapping Address Space and Asymmetric Egress Inspection

Three business units run in one region behind a transit gateway. An acquisition brought a VPC that uses 10.0.0.0/16, which overlaps the existing shared-services VPC.

702 words, about 4 min
5

Third-Party Assurances and the "Cloud Certified" Question

A financial services firm wants to place an HR platform holding employee health data with a SaaS provider. The provider supplies a SOC 2 Type II covering the application but explicitly carves out a subservice organisation that hosts the database in another jurisdiction.

716 words, about 4 min