Domain 1: Cloud Computing Concepts & Architecture

• This domain introduces the fundamental concepts of cloud computing, including service models (IaaS, PaaS, SaaS) and deployment models (public, private, hybrid, community). It also explores the essential characteristics defined by NIST, cloud reference architecture, and shared responsibility models, providing a solid foundation for understanding cloud environments.

• Domain 2: Cloud Governance and Strategies
  Focuses on developing governance frameworks and strategies for secure cloud adoption. It covers policy development, roles and responsibilities, accountability mechanisms, and how organizations can align cloud initiatives with business objectives and compliance requirements.

• Domain 3: Risk, Audit, and Compliance
  Examines risk management principles and practices in cloud environments. It includes methods for identifying, assessing, and mitigating cloud-specific risks, as well as performing audits to ensure compliance with regulatory standards such as GDPR, ISO 27001, and SOC 2.

• Domain 4: Organization Management
  Explores how cloud computing impacts organizational structure, culture, and operations. It discusses strategies for change management, defining roles (such as cloud service manager and cloud security officer), and integrating cloud governance into enterprise management systems.

• Domain 5: Identity and Access Management (IAM)
  Covers the principles and best practices for managing digital identities in the cloud. Topics include authentication, authorization, federated identity, Single Sign-On (SSO), and the use of identity providers to enforce least privilege and zero trust models.

• Domain 6: Security Monitoring
  Provides an understanding of continuous monitoring, logging, and auditing in the cloud. It covers threat detection, intrusion monitoring, SIEM integration, and the use of automated tools to maintain visibility and detect anomalies in cloud environments.

• Domain 7: Infrastructure & Networking
  Focuses on securing cloud infrastructure components and networking architecture. It discusses virtual networks, firewalls, segmentation, secure connectivity, and the implementation of defense-in-depth strategies to protect cloud-based infrastructure.

• Domain 8: Cloud Workload Security
  Covers how to secure workloads deployed in cloud environments, including virtual machines, containers, and serverless functions. It highlights configuration management, hardening, patching, and workload isolation to reduce attack surfaces.

• Domain 9: Data Security
  Addresses the full lifecycle of data protection in the cloud — from data creation and storage to transmission and destruction. Topics include encryption, tokenization, data classification, key management, and strategies for ensuring data confidentiality, integrity, and availability.

• Domain 10: Application Security
  Examines the security of applications built and hosted in the cloud. It includes secure development practices (DevSecOps), API security, code analysis, and protection against common vulnerabilities such as injection attacks and insecure configurations.

• Domain 11: Incident Response & Resilience
  Focuses on how to prepare for, detect, and respond to security incidents in the cloud. It also discusses business continuity planning (BCP), disaster recovery (DR), and strategies to ensure service resilience and minimize downtime.

• Domain 12: Related Technologies & Strategies
  Explores emerging technologies and trends that impact cloud security, such as artificial intelligence, blockchain, containerization, and serverless computing. It also includes best practices for integrating these technologies into a secure cloud strategy.