CCSP case studies
CCSP · Put your knowledge to work in context.
The Certified Cloud Security Professional (CCSP) is an ISC2 credential for security practitioners who design, manage and secure data, applications and infrastructure in cloud environments. ISC2 positions it around advanced technical skills applied through best practices, policies and procedures drawn from certified members and cybersecurity experts worldwide. The CCSP case studies are 5 cases and about 3,737 words.
1Region Choice Under a Residency Constraint
Northwind Capital is migrating its trade-surveillance platform to a public cloud ahead of a regulatory deadline. The regulator requires that trade records be stored and processed only within country X.
726 words, about 4 min2Support Access Without Expanding Cardholder Scope
A payments processor runs a cloud data warehouse holding 12 million cardholder records. Support engineers in three countries work follow-the-sun and must reproduce customer disputes, which requires realistic transaction data.
706 words, about 4 min3Containment After a Cross-Account Pivot
Meridian Health's cloud estate grew from 30 to 210 accounts after two acquisitions. During a red-team engagement, the team obtained domain admin in the acquired subsidiary's flat VPC in 40 minutes, then reached the core imaging archive because a full-mesh peering connection was left in place 'temporarily' 14 months ago.
806 words, about 4 min4Making the Pipeline Gate Credible
Tessera Retail ships 60 times a day across 140 microservices on a managed Kubernetes platform. Eight months ago AppSec enabled SAST, dependency scanning, and container scanning; the backlog now holds 1,400 critical findings, 92% of them in three legacy services nobody has touched in a year.
780 words, about 4 min5A Breach With Four Clocks
Vantage Learning is a SaaS provider with 900 institutional customers in the EU, the UK, and 12 US states. On Friday at 18:00 UTC an engineer discovers that a misconfigured object storage bucket exposed 40,000 student records - names, emails, accommodation notes - for an unknown period; logs show access from three unrecognized IPs 11 days earlier.
719 words, about 4 min