With the speedy adoption of cloud services for enterprise operations, the cloud system infrastructure services market is predicted to grow concerning thirty-five .9 p.c and reach $40.8 billion in 2018 as par Gartner analysis. This accrued dominance of the IaaS suppliers brings each monumental opportunities moreover as challenges for finish users moreover as organizations regarding security. this is often as a result of as customers and enterprises move a lot of quantity of knowledge to the cloud, this integrates its own threats associated with confidentiality, handiness, and integrity.

Thus each organization that is coping with cloud platforms got to stress upon risk assessment, written agreement protections, and application-layer controls. Here comes the role data|of data|of information} security leaders World Health Organization have in-depth knowledge of cloud security and shrewdness to safeguard sensitive information. Hence, the certified cloud security professionals area unit currently high in demand as they are available beneath the specialty cluster.

Moreover, if the CCSK certification is vendor-neutral, then it entirely focuses on cloud security no matter the underlying platform. Also, such certifications facilitate to develop the mindset for all kinds of cloud-enabled environments. Certificate of cloud security information (CCSK) is one in all the foremost distinguished vendor-neutral cloud security certifications by the Cloud Security Alliance.

Certificate of cloud security information measures normal|a typical} standard for the safety parameters of all cloud platforms whether or not it’s AWS, Azure, Google or Salesforce. Hence, it’s not a simple test and desires an organized approach for preparation. the quality thanks to getting ready for this test is analogous to the other cloud exams, and you would like to require to facilitate of the below:

Preparation materials
CCSK coaching
Practice tests
CCSK observe Tests

Preparation materials

please go through this link to access our preparation materials.

CCSK coaching

Formal coaching plays a vital role within the preparation of prime IT certifications to extend the probabilities of passing the test with an honest score. this is often as a result of like most of the IT certifications area untechnical, they have active exposure and well real-world expertise. This is a lot of significantly, the case for the high-end technologies like cloud wherever you would like to access a cloud system and apply the simplest practices.

Hence, even from the cloud security alliance (CSA), they suggest formal coaching. For that purpose, CSA has developed 2 CCSK courses that address the wants of the certification and should be taken by the answerer as a neighborhood of the certification preparation.

Practice tests

provide a candidate the chance to require a mock version of the associate test before they seem for the particular test. Their area unit multiple advantages of taking a observe check.

Practice tests highlight the weak areas that a candidate must master
Similarly, the observe tests target that areas the candidate has already down. thus they have to append minimum time for those topics and stress in alternative areas.
As the observe tests simulate the particular test, thus it helps to cut back a candidate’s anxiety and concern around the test method.
Taking observe tests area unit useful for effective learning.
Practice tests area unit per assessment standards and sensible observe.
Practice tests facilitate higher time management throughout a particular test.

It’s been known as the “mother of all cloud computing security certifications” by CIO Magazine, associate degreed Search Cloud Security notes that it’s “a smart different cloud security certification for associate degree entry-level to midrange security skilled with an interest in cloud security.” therefore it had been no surprise once Certification Magazine listed CCSK at #1 on the common wage Survey 2016.

For those curious about taking their CCSK careers to the subsequent level, we tend to square measure providing the CCSK and active Course (San Francisco, April 15-16) at the 2018 RSA Conference.

Our intensive course provides you active, in-depth cloud security coaching, wherever you’ll learn to use your data as you perform a series of exercises to finish a situation transfer a fictional organization firmly into the cloud.

Divided into six theoretical modules and 6 research laboratory exercises, the course begins with an in-depth description of cloud computing, and goes on to hide material from the official Security steerage for essential Areas of Focus in Cloud Computing, Cloud Controls Matrix v3.0.1 (CCM) documents from Cloud Security Alliance, and proposals from the eu Network and knowledge Security Agency (ENISA).

Still on the fence? Here square measure 5 reasons you would like to register these days.

Get trained by the simplest within the business. wealthy Mogull, a distinguished analyst and sought-after speaker at events like RSAC and BlackHat, are going to be there to guide you, intensive cloud security course. Not solely is he the foremost skilled CCSK trainer within the trade, however, he created the course content. would like we are saying more?
Gain unjust security data. additionally, to learning the foundational variations of cloud, you’ll acquire sensible data and also the skills to make and maintain a secure cloud business setting promptly. It’s smart for you and smart for your company.
Make the boss stay up and see. Your new data can translate to magnified confidence and quality once operating along the cloud, and simply perhaps a much better job or dare we are saying, a raise?
Move to the pinnacle of the category. By the tip of the course, you’ll be ready to require the CCSK communication to earn your Cloud Security Alliance CCSK v4.0 certificate, an extremely regarded certification throughout the trade certifying ability in key cloud security areas.

The Cloud Security Alliance’s Certificate of Cloud Security Knowledge (CCSK)  CCSK Certificate Training is designed to assess knowledge of IT as a Service security. Passing a certification test is always a challenge since you can never be sure whether there will be trick questions, what topics will be covered, etc.

My Experience CCSK Certificate Training

As someone who had the same worries and is now certified, let me offer you some useful tips. This information is based on the test I passed on April 16, 2012, so it’s up to date.

I can’t tell you the questions I was asked—in any case, you may not have the same ones—but I’ll give you advice that helped me. Then it’s up to you!

important documents (in theory)

Theoretically, it is important to review these four documents (in order of decreasing importance):

• Cloud Security Alliance: “Security Guidance for Critical Areas of Focus in Cloud Computing Version 2.1”
• European Network and Information Security Agency (ENISA): “Cloud Computing Security Risk Assessment”
• National Institute of Standards and Technology (NIST): “The NIST Definition of Cloud Computing”
• Jericho Forum: “Cloud Cube Model: Selecting Cloud Formations for Secure Collaboration”

important documents (in practice)

If you only have time to read one thing, it should be the Cloud Security Alliance document, which is essential for the test. The “Domain 5 – Information Lifecycle Management” chapter is key—I had quite a few questions about it on the test.

You should also read at least the executive summary of the ENISA document. As for the other two, a quick read-through should suffice.

Of course, the amount of time you need to spend reading the documents depends on your familiarity with the subject matter. I dream about this stuff at night, so I was able to skim over certain areas.

types of questions

The test consists of 50 multiple-choice questions, each with only one correct answer (at least when I took the exam, thank goodness ).

The most difficult ones are based on the Cloud Security Alliance document (although those covering “Domain 5 – Information Lifecycle Management” were not too difficult). The questions referring to the other documents are identified as such, so it’s clear where to find the answers—the test is pretty straightforward.

For sample questions, check out at the CCSK certification page on the Cloud Security Alliance website.

registration and scoring

You can register and take the test online ($295 for two tries) at any time. The Web interface is easy to use; I didn’t have any problems during my test.

To be CCSK certified, you must correctly answer at least 40 out of 50 questions (80% accuracy) in less than an hour.

Overall, the questions are relatively difficult. But the questions on the ENISA document weren’t too hard, and you can consult the documents during the test (the “find” bar is quite useful). The questions on the NIST and Jericho Forum documents weren’t too challenging either.

using the documents: helpful but not sufficient

Although you are allowed to search the documents, you only have an hour to answer 50 questions. That’s a little more than a minute per question (72 seconds to be exact). That’s not much time, so if you try to just search the documents, you’re likely to have problems. And of course, you can’t pause the test once it has started—that would be too easy.

But the “find” bar can come in handy for questions on the ENISA document. It’s also reassuring to have “Domain 5 – Information Lifecycle Management” from the Cloud Security Alliance guide on hand. But consulting the documents is not enough, at least in my experience.

Of course, being certified does not necessarily mean you’re an expert. I’ve interviewed CISSP-certified candidates who couldn’t clearly explain the principles of a document signature with asymmetric keys.

what’s not in the documents

I had to answer a few questions (two or three) on the security of the Amazon EC2 service. So I encourage you to read (among other things) “Amazon Web Services: Risk and Compliance” and to look at this “Using Security Groups” page.

Although I got questions about Amazon EC2, it’s entirely possible that you will have questions about other services. Your profession and experience will obviously play a key role here. If you work in cloud security and are a curious person by nature, passing the CCSK test shouldn’t be too difficult.

the pot of gold at the end

At the end of 60 minutes, you’ll get your score immediately. If everything goes well, you can download your diploma in PDF or HTML format.

You’ll be able to see your success rate in each area (Applied, Domains 1-10, and ENISA), but not which questions you answered incorrectly. I made two mistakes (one in “Domain 3 – Legal and eDiscovery” and another in “Domain 4 – Compliance and Audit”).

in conclusion

Getting certified is not that simple. According to DarkReading’s “Cloud Security Certification Not So Simple” (August 9, 2011), only 53% of test takers manage to get the diploma. The article’s author, Jim Reavis, lists four primary topics to study, and I had questions on them during my test.

If you work in cloud security, getting CCSK certified can benefit both you and your employer. If you know the field, you just need to refresh a bit (and concentrate for an hour). In my case, the idea came to me at the office on a Monday morning. I said to myself, “I can do this!” One hour later I had my diploma.

Good luck!

Reference: https://www.orange-business.com/en/blogs/connecting-technology/cloud-computing/7-tips-for-getting-ccsk-certified

Govt plans to use AI tools for digital forensics. The government is planning to use artificial intelligence-based tools for a digital forensics project currently underway at the Centre for Development of Advanced Computing (C-DAC), said a report in The Economic Times.

The report said that the C-DAC is planning to use artificial intelligence to look out for threats before they breach systems and track hackers to stop repeated breaches. The digital forensics arm of the C-DAC will help small and medium firms roll out commercial solutions for cyber threats, it added.

Finance minister Arun Jaitley had, in last year’s budget speech, said that the C-DAC, in collaboration with Indian Computer Emergency Response Team (CERT-In), would look to develop tools to tackle cybersecurity issues. He had also said that CERTs for different sectors, especially the financial sector, were being contemplated.

After Jaitley’s speech, Union minister for electronics and information technology Ravi Shankar Prasad had said that the C-DAC was working on digital forensics, a branch of forensic science that deals with recovering and analysing information from data storage devices including computers, phones and networks.

The report said that the digital forensics project has a budget of Rs 3.95 crore and that, apart from the C-DAC, the Indian Institute of Technology, Patna will also be involved in its implementation.

The report cited a senior government official as saying that the project will help the C-DAC research on cybersecurity for two years before starting out training programmes for government officials in the field.

The Indian government has taken a number of initiatives in recent years to boost cybersecurity.

Last month, the government said its botnet malware apps had reduced infections in the country by at least 51% after their launch on the web and the Google Play Store in February 2017.

The government had launched the Cyber Swachhta Kendra (Botnet Cleaning and Malware Analysis Centre) under CERT-In in February last year. The government had also launched apps such as AppSamvid, USB Pratirodh and M-Kavach on Google Play Store and on the web to help detect and remove botnet malware, in the same period.

Reference: http://techcircle.vccircle.com/2018/02/15/govt-plans-to-use-ai-tools-for-digital-forensics-report

The most exciting thing about security is that unlike most science or engineering disciplines, where the laws of physics and nature do not change, the knowledge in the cyber security discipline has constant and rapid change. This leads to an ever constant growth of a need for more knowledge and a need for more qualifications and certifications such as CISMP in order to demonstrate to an employer or company that you are capable of keeping up with the frequency of which that cyber security is expanding and changing. Certificates should be viewed as not an end, but as a measurement of mastery along the pathway of a profession in security and this CISMP course is a crucial part of that pathway and one that you cannot afford to miss.

This is where we come in, Net Security Training has years of experience with tutoring and guiding people through every step of the way through the process. Net Security Training and the course we provide are both accredited by ISEB/BCS, to provide official training for their CISMP examination. The CISMP training course will provide you with the knowledge and understanding of the main principals required to be an effective member of an information security team with security responsibilities as part of your day to day role. Like I said before, you can start your training with us today by visiting our course schedule to find any courses and dates that suit you or by calling us on 020 8840 4496, or if you just want to get a little more info about CISMP or any of our other courses you can email one of our friendly staff at info@net-security-training.co.uk. Our CISMP course will be running from the 13^th to the 17^th of November and will cost £2,195.

There are many more possible moves in a Go game than a chess match

Google’s DeepMind says it has made another big advance in artificial intelligence by getting a machine to master the Chinese game of Go without help from human players.

The AlphaGo program, devised by the tech giant’s AI division, has already beaten two of the world’s best players.

It had started by learning from thousands of games played by humans.

But the new AlphaGo Zero began with a blank Go board and no data apart from the rules, and then played itself.

Within 72 hours it was good enough to beat the original program by 100 games to zero.

DeepMind’s chief executive, Demis Hassabis, said the system could now have more general applications in scientific research.

“We’re quite excited because we think this is now good enough to make some real progress on some real problems even though we’re obviously a long way from full AI,” he told the BBC and other journalists.

The London-based artificial intelligence company’s software defeated leading South Korean Go player Lee Se-dol by four games to one last year.

In a game where there are more possible legal board positions than there are atoms in the universe, it was a triumph for machine over man and one that came much earlier than many in the AI world had expected.

AlphaGo followed this with the defeat of the world’s number one Go player, China’s Ke Jie, in May.

As with many advances in this field, the achievements required the combination of vast amounts of data – in this case records of thousands of games – and a lot of computer-processing power.

David Silver, who led that effort, says the team took a very different approach with AlphaGo Zero.

“The new version starts from a neural network that knows nothing at all about the game of Go,” he explained.

“The only knowledge it has is the rules of the game. Apart from that, it figures everything out just by playing games against itself.”

What is Go?

Go is thought to date back to ancient China, several thousand years ago.

Using black and white stones on a grid, players gain the upper hand by surrounding their opponents’ pieces with their own.

The rules are simpler than those of chess, but a player typically has a choice of 200 moves at most points in the game, compared with about 20 in chess.

It can be very difficult to determine who is winning, and many of the top human players rely on instinct.

This has turned out to be far more efficient way of addressing the problem.

Whereas AlphaGo took months to get to the point where it could take on a professional, AlphaGo Zero got there in just three days, using a fraction of the processing power.

“It shows it’s the novel algorithms that count, not the compute power or the data,” says Mr Silver.

He enthuses about an idea some may find rather scary – that in just a few days a machine has surpassed the knowledge of this game acquired by humanity over thousands of years.

“We’ve actually removed the constraints of human knowledge and it’s able, therefore, to create knowledge itself from first principles, from a blank slate,” he said.

Image copyright Moxie Pictures Image caption Google DeepMind’s defeat of champion Go player Lee Se-dol has been made into a documentary

Whereas earlier versions quickly learned from and improved upon human strategies, AlphaGo Zero developed techniques which the professional player who advised DeepMind said he had never seen before.

Many of the team have now moved on to new projects where they are trying to take this technique to new areas. Demis Hassabis mentions drug design and the discovery of new materials as areas of interest.

Whereas some see a threat from AI, he looks ahead with optimism.

“I hope these kind of algorithms will be routinely working with us as scientific experts medical experts on advancing the frontiers of science and medicine – that’s what I hope,” he says.

But he and his colleagues are cautious about how rapidly we will see the wider application of these AI techniques – a game with clear rules and no element of luck is one thing, the messy, random, unpredictable real world quite another.

We need to keep a close eye on the ethical dilemmas involved in developing a machine that, by some definitions, can think for itself – especially when it is controlled by a giant like Google.

But for now, there are few signs that AlphaGo Zero and its ilk will either steal our jobs or threaten to make humanity obsolete.

Reference: BBC news

With a General Election and Brexit on the horizon, a new report shows worrying skills shortages in the engineering, IT and care work industries. Insights explain how apprenticeships can help employers find the best talent

A chronic lack of skills and an ineffective education system are threatening to harm the UK’s growth and competitiveness as the nation secures its exit from European Union membership, according to new research from the Recruitment & Employment Confederation (REV)  Apprenticeships can be the answer.

The report showed employers in the UK are struggling to fill vacancies after the sharpest drop for more than a year in the number of available candidates.

The REC said its latest monthly snapshot of the jobs market found vacancies continued to rise in April for permanent and temporary staff, albeit at a softer pace than in March, reaching their weakest levels for 16 months.

Firms are reporting skills shortages across a range of more than 60 roles, including engineers, IT specialists, care workers and accountants.

This is understandably a cause for concern for many employers and recruiters. Currently, many companies are hiring people from EU nations to fill the skills gap, but once the UK leaves the bloc, it is likely there may be greater restrictions on immigrants moving to Britain.

Compiled by consultancy IHS Markit using data from 400 recruitment firms, the REC study found demand for staff rose sharply across the private sector in April, but declined across the public sector.

Interestingly, employers are seemingly finding it easier to find contractors, rather than permanent staffers. In April, the pace of expansion for temporary placements was the fastest since December, but there was also a slowdown in the number of people placed into permanent roles.

REC chief executive Kevin Green says bosses are increasingly worried about government investment in training and career advice and future access to economic migrants.

“Demand for staff is growing within all sectors and all regions of the UK, but there are fewer and fewer people available to fill the vacancies,” he said. “We have the lowest unemployment rate since 2005 and people already in work are becoming more hesitant about moving jobs amid Brexit uncertainty.

“Meanwhile, the weakening pound and lack of clarity about future immigration rules is putting off some EU nationals from taking up roles in the UK.”

Apprenticeships, filling the gap

With new innovative businesses and enterprises created each year in fast-growing industries such as IT and engineering, high level modern apprenticeships have proven to be important initiatives for SMEs and blue chip businesses for developing young talent with the cutting-edge skills they demand most in their industry.

CMI director of strategy Petra Wilton said apprenticeships will be necessary for employers to build for growth in the coming years.

“Investment in high-quality apprenticeships will be a crucial step in tackling the UK’s crippling professional skills crisis highlighted by the Recruitment and Employment Confederation’s study,” she said. “As we head towards Brexit, we’ll need an internationally competitive economy built on world-class skills. The Apprenticeship Levy is now there for the taking, giving employers the means to invest in developing home-grown talent.

“According to employers, 65% of current graduates do not have the management skills they’re looking for. Investing in management apprenticeships will provide school leavers and existing workers alike with the hands-on, practical experience needed to gain those management and leadership capabilities.

http://www.managers.org.uk/insights/news/2017/may/uk-skills-shortage-apprenticeships-can-be-the-answer