CSPCC case studies
CSPCC · Put your knowledge to work in context.
The Certified Security Professional in Cloud Computing (CSPCC) is a vendor-neutral credential aimed at security practitioners who design, govern, and defend workloads that run on public, private, and hybrid cloud platforms. It suits security engineers, cloud architects, DevSecOps practitioners, risk and compliance analysts, and IT auditors who already understand traditional security controls and now need to apply them to elastic, API-driven, multi-tenant environments. The CSPCC case studies are 5 cases and about 4,370 words.
1Choosing a DR Topology for a 12 TB Order Platform Against a Committed RTO/RPO
A retail company is migrating its order-management platform to cloud. The platform runs on 40 virtual machines with a 12 TB relational database and peaks at 3,200 orders per minute.
651 words, about 3 min21,400 Long-Lived Cloud Keys Across a 300-Repository CI Estate
A financial-services firm runs 300 source repositories and 42 production deployment pipelines on a shared CI service. An audit found 1,400 long-lived cloud access keys stored as CI variables; 220 are attached to roles that can modify IAM or delete storage, and the median key age is 640 days.
913 words, about 5 min3Erasure Requests Versus Immutable Tax Archives in a Multi-Tenant HR SaaS
An HR SaaS provider stores records for 2.3 million data subjects across the EU and California. Primary data sits in a multi-tenant relational database encrypted with one KMS key per region, shared by all tenants.
917 words, about 5 min4A Release Gate That Teams Route Around With a Shared Admin Account
A product company with 14 teams and 60 developers deploys about 900 times per week through a shared pipeline that runs static analysis, dependency scanning, and container image scanning. The pipeline blocks any build that reports a high or critical finding.
948 words, about 5 min5A Cryptomining Detection That Waited Five Hours for Break-Glass Approval
At 02:40, a detection fires in a production workload account: compute resources are contacting a mining pool. The on-call security engineer has read-only access to that account.
941 words, about 5 min