What is the PECB Certified Cloud Security Analyst?
The PECB Certified Cloud Security Analyst (CCSA) is a practical cloud security course rather than a governance one. Across a 5-day equivalent of material it teaches you to secure and monitor real cloud estates — working hands-on in AWS, Azure, and GCP rather than reasoning about frameworks in the abstract. The course covers the shared responsibility model alongside practical cloud-log analysis and container-security exercises.
The curriculum moves through the full analyst workload:
- Cloud security fundamentals — service models, the shared responsibility model, and cloud governance and compliance.
- Identity and data security — identity and access management, cloud data security practices, encryption and key management.
- Threat detection — cloud threat detection, lateral movement and crypto mining attacks, and attack isolation.
- Monitoring and logs — security tooling in AWS and Azure, cloud security monitoring, and log management and analysis.
- Container security — Docker and Kubernetes security practices, and securing container workloads in the cloud.
By the end you should be able to explain cloud service models and the shared responsibility model precisely, apply cloud data-security practices, detect lateral movement and crypto mining, operate security tooling and monitoring in AWS and Azure, and implement secure practices for Kubernetes and Docker.
Why cloud security skills matter in Australia
Cloud adoption creates operational responsibilities for the customer as well as the provider. These are relevant considerations when developing cloud-security skills:
- ACSC cloud guidance and the ISM — the Australian Cyber Security Centre publishes cloud security guidance, and the Information Security Manual carries cloud-specific controls. Someone has to translate both into tenant configuration, and that person is usually an analyst.
- IRAP-assessed cloud in government — An IRAP assessment concerns an identified scope and point in time. A cloud-service assessment does not automatically assess or authorise the customer’s workload; each organisation remains responsible for its requirements and risk decisions.
- Shared-responsibility failures — misconfiguration can expose cloud services. Exposed storage, over-privileged identities, and unmonitored logging are customer-side failures, and they are exactly what this course trains you to find and fix.
- APRA CPS 234 and regulated cloud — regulated entities must evidence that cloud environments are monitored and controlled, not merely provisioned. That evidence comes from the monitoring and log-management disciplines CCSA covers.
- M365, Azure, and AWS careers — Cloud Security Analyst, Cloud Security Engineer, SOC Analyst, and DevSecOps are possible career directions. Required platforms, experience and credentials vary by employer; no job-market share is asserted here.
CCSA also pairs naturally with a governance credential. If your organisation runs — or is building — an ISO 27001 management system, the analyst skills here operationalise its cloud controls. See our ISO 27001 certification guide for that side of the pairing.
Provider assurance and customer configuration address different responsibilities. A training credential can support a capability assessment; it does not prove that a cloud environment is secure.
Who should take this course
- System and network administrators
- Security analysts and SOC team members
- Compliance and risk officers working with cloud environments
- IT professionals pivoting into cloud security
- Security consultants and auditors assessing cloud estates
PECB expects a solid foundation in core IT and networking — command-line operations, TCP/IP, DNS, HTTP/S, and general system administration. If you need to build that base first, start with our Linux certification guide. If your interest is the detection-and-response side of security operations, the Cyber Threat Analyst and Incident Response guides cover the adjacent credentials.
What you learn — the 5-day agenda
The course is a 5-day equivalent — around 35–45 hours self-paced — with four days of training and the certification exam on day five:
Cloud security fundamentals and service models, the shared responsibility model, cloud governance and compliance, and identity and access management.
Cloud data security practices, encryption and key management, cloud threat detection, lateral movement and crypto mining attacks, and attack isolation.
Security tooling in AWS and Azure, cloud security monitoring, and log management and analysis — the operational core of the analyst role.
Container security fundamentals, Docker security practices, Kubernetes security practices, and securing container workloads in the cloud.
The 3-hour, remotely proctored PECB exam across five competency domains (see below).
Throughout, the material is delivered with hands-on labs and practical exercises across AWS, Azure, and GCP — threat detection, cloud log management and monitoring, and Docker and Kubernetes hardening. Do the labs rather than reading them: two of the five exam domains are much easier having actually configured something.
Current examination requirements
Open-book, multiple-choice. Duration: 3 hours. 80 multiple-choice questions in the current English PECB examination record. Passing requirements: 70%. Check the current PECB examination record and assigned examination before booking.
- Cloud security fundamentals, governance, and compliance
- Identity and access management and cloud data security
- Cloud threat detection, lateral movement, and attack isolation
- Cloud security monitoring and log management
- Container security with Docker and Kubernetes
Cost, inclusions and access
Self-Study: A$ 857.00 excluding GST. Published inclusions (subject to the credential and retake clarification immediately below): PECB Certified Cloud Security Analyst slide deck (digital); More than 300 pages of comprehensive training materials; 12 months access via myPECB; Attestation of course completion worth 31 CPD credits; Certification and examination fees included in the course price; Exam covering five competency domains; First exam attempt plus one free retake within 12 months; PECB Provisional Analyst / Analyst credential on pass; Practical exercises across AWS, Azure, and GCP; Threat detection — lateral movement and crypto mining; Cloud log management and monitoring; Docker and Kubernetes hardening. Clarification: references to a credential or certificate on pass do not mean automatic award. The eligible PECB credential requires an application and PECB approval, including applicable experience and ethics requirements. PECB’s partner-course policy sets a 12-month examination and included-retake cycle from purchase for Self-Study and eLearning, or from course completion for instructor-led training. A failed attempt does not restart that cycle. The first retake requires at least 15 days after the unsuccessful examination; booking rules and the recorded myPECB deadline also apply. A retained inclusion referring to the initial examination date does not extend or restart this policy cycle. Australian GST follows the billing address. Check the course page for the full inclusions and current booking options.
This course publishes 12 months of material access. Course-material access, examination and retake deadlines, and any certificate-application deadline are separate. Confirm the material-access start date in your booking confirmation and check the deadlines recorded in myPECB before scheduling your examination. PECB’s partner-course policy sets a 12-month examination and included-retake cycle from purchase for Self-Study and eLearning, or from course completion for instructor-led training. A failed attempt does not restart that cycle. The first retake requires at least 15 days after the unsuccessful examination; booking rules and the recorded myPECB deadline also apply.
Credential requirements and how to enrol
A solid foundation in core IT and networking concepts. Familiarity with command-line operations, TCP/IP, DNS, and HTTP/S. General system administration experience.
Two credential tiers: Provisional Analyst (no experience required) and Analyst (five years of professional experience, two of which in cloud security, plus at least 300 hours of cloud security project activities). Both require signing the PECB Code of Ethics. Passing the examination and receiving a credential are separate: PECB must approve the application. Maintenance depends on the credential awarded; Provisional credentials and Foundation certificates are exempt from CPD and maintenance fees. Check the current PECB policy for other credentials.
Primary references and applicability
These sources explain the requirements and scope distinctions discussed above. Check their applicability to the organisation or credential.
FAQs
What is the PECB Certified Cloud Security Analyst (CCSA)?
It is a practical, hands-on cloud security certification rather than a governance one. The course runs five days of material across cloud security fundamentals and the shared responsibility model, identity and access management, cloud data security, threat detection — including lateral movement and crypto mining — security monitoring and log management in AWS and Azure, and container security with Docker and Kubernetes. Labs and practical exercises span AWS, Azure, and GCP.
How long is the Cloud Security Analyst course?
It is a 5-day course equivalent, delivered as self-paced study — plan for 35–45 hours of effort. You have 12 months of access via myPECB, so you can fit it around a full-time role. Four days cover the training material and day five is the certification exam.
Which cloud platforms does the course cover?
AWS, Azure, and GCP. The security operating material concentrates on AWS and Azure tooling, with practical exercises spanning all three platforms. It is deliberately multi-cloud rather than vendor-specific, so learners can compare approaches across the covered platforms.
What does the exam involve?
Open-book, multiple-choice. Duration: 3 hours. 80 multiple-choice questions in the current English PECB examination record. Passing requirements: 70%. Check the current PECB examination record and assigned examination before booking.
What technical background do I need?
PECB expects a solid foundation in core IT and networking concepts — familiarity with command-line operations, TCP/IP, DNS, HTTP/S, and general system administration. Review these prerequisites before enrolling; the course assumes an existing IT foundation.
How much does the course cost in Australia?
Self-Study: A$ 857.00 excluding GST. Published inclusions (subject to the credential and retake clarification immediately below): PECB Certified Cloud Security Analyst slide deck (digital); More than 300 pages of comprehensive training materials; 12 months access via myPECB; Attestation of course completion worth 31 CPD credits; Certification and examination fees included in the course price; Exam covering five competency domains; First exam attempt plus one free retake within 12 months; PECB Provisional Analyst / Analyst credential on pass; Practical exercises across AWS, Azure, and GCP; Threat detection — lateral movement and crypto mining; Cloud log management and monitoring; Docker and Kubernetes hardening. Clarification: references to a credential or certificate on pass do not mean automatic award. The eligible PECB credential requires an application and PECB approval, including applicable experience and ethics requirements. PECB’s partner-course policy sets a 12-month examination and included-retake cycle from purchase for Self-Study and eLearning, or from course completion for instructor-led training. A failed attempt does not restart that cycle. The first retake requires at least 15 days after the unsuccessful examination; booking rules and the recorded myPECB deadline also apply. A retained inclusion referring to the initial examination date does not extend or restart this policy cycle. Australian GST follows the billing address. Check the course page for the full inclusions and current booking options.
What credential do I receive when I pass?
Two credential tiers: Provisional Analyst (no experience required) and Analyst (five years of professional experience, two of which in cloud security, plus at least 300 hours of cloud security project activities). Both require signing the PECB Code of Ethics. Passing the examination and receiving a credential are separate: PECB must approve the application. Maintenance depends on the credential awarded; Provisional credentials and Foundation certificates are exempt from CPD and maintenance fees. Check the current PECB policy for other credentials.
How does CCSA relate to ISO 27001 in Australia?
They solve different halves of the same problem. ISO 27001 gives you the certifiable management system — governance, risk treatment, and the Annex A controls. CCSA gives you the hands-on capability to secure and monitor the cloud estate those controls describe. Many Australian practitioners hold both: ISO 27001 for the program, CCSA for the platform work in AWS, Azure, and M365 environments.