CCSP Readiness: Cloud Security at the Professional Level
Signature Course No. 410 — A Signature AI Socratic Coaching Course.
No experience needed — your coach starts where you are.
A New Kind of Learning
Socratic coaching, delivered by an agentic AI coach.
Not a course you watch. An AI coach you work with.
The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.
The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.
A coach that teaches by asking — not by lecturing
The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's CCSP Readiness: Cloud Security at the Professional Level course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.
In the cloud, the design is the security. The estate is reached over the public internet, built by API calls, shared with other tenants, and copied by default — so what protects it is a set of decisions made early and in writing: who is responsible for what, how the estate is structured, where data lives and how it moves, whose keys encrypt it, and how strongly one workload is fenced from the next. This course installs those decisions in order, on one running estate: Fellbridge Mutual Insurance Group, a regional mutual insurer mid-migration to the cloud.
It starts with the line. Every cloud service divides the work of security between the provider, who secures the cloud itself, and you, who secure what you put in it. You will learn to draw that line three times without hesitation — infrastructure, platform, and software service — from the signed agreement rather than any printed table, and to name the duties that never transfer at any model: classification, accountability, and the decision to place the data at all.
It works in two movements. First, Module 1 — Own the Design, Guard the Data — work through Concepts 1–9, finishing with The Estate Blueprint; then, Module 2 — Build It, Run It, Answer for It — work through Concepts 10–18, finishing with The First Ninety Days Live.
Both capstones produce real artifacts — an estate blueprint for Fellbridge's new platform: the responsibility allocation, the reference architecture, the data walk across three classes, the key and movement rules, and the signed isolation judgment; and an operations and assurance pack for the same estate ninety days after go-live, answering unexplained reads, a separated broker's surviving access, a customer's assurance demand, and a regulator's residency question from one evidence base.
The honesty standard is part of the course. Readiness is not a promise: this course prepares you to sit the CCSP examination as a prepared candidate, and it does not promise a pass or a score and confers no certification — only ISC2 can do that, on its own examination, under its own rules. No vendor's console procedure is taught anywhere; you learn the workflow and the evidence, never this quarter's buttons, and the domain structure is the published outline, to be verified against the current ISC2 outline before booking. Legal and compliance material is professional information for a specialist directing work with counsel and auditors; it is not legal advice.
The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.
CCSP Readiness: Cloud Security at the Professional Level is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning has delivered since 2002.
Course Facts
One full concept, coached end to end — free: verify your email and we’ll send you a link to start.
Already enrolled? Enter the course →
Diagnose → Learn & Practice → Prove → Capstone
Every learner moves through the same discipline a Cognosco instructor would insist on in the room.
Diagnose
The Coach starts where the course starts: with the line. Pick one cloud service your organization uses today and write, without looking anything up, which party patches the operating system it runs on — and say what document would settle it; name a duty your organization describes as “the provider handles it” and say who, by name or role, verifies on your side that it is actually handled; and think of the most sensitive data your organization holds in any cloud service and name the duties touching it that could never transfer to a provider at any service model. Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.
Learn & Practice
Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.
Prove
Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.
Capstone
Finish with two capstones — The Estate Blueprint for Module 1 and The First Ninety Days Live for Module 2 — that pull the whole course together, and earn the certificate.
What You'll Learn
Draw the line, guard the data, answer with evidence. Cloud security is not general security with new product names. The failures are different in shape: a responsibility nobody drew, a storage bucket nobody owned, a key nobody could revoke, an administrator action no log ever captured, a deletion certificate for data still sitting in a backup three regions away. Each concept isolates one of those cloud-shaped failures and teaches the move that prevents it.
Module 1 owns the design and guards the data. Shared Responsibility by Service Model; The Running Estate; Reference Architecture That Holds; The Data Lifecycle, Rewritten by the Cloud; Storage Architectures and Their Exposure Shapes; Find It and Classify It; Control the Movement; Keys You Own, Keys You Borrow; and Isolation on Shared Ground — the line drawn, the estate read whole, the constitution laid, and the full data discipline worked class by class.
Module 2 builds it, runs it, and answers for it. Networks Drawn in Software; Identity and Federation in the Cloud; The Pipeline Is the Perimeter for Code; Application Controls for Rented Ground; One Timeline Across Providers; Respond When the Machine Disappears; Price the Provider Bet; Where Data May Live, and How It Answers in Court; and Assurance in the Cloud's Own Vocabulary — the estate followed into life, and proven to the outside world.
And it holds its boundary throughout. This course owns only the cloud specialist's seat: the six CCSP domains practiced as cloud-specific work. The generalist's eight-domain frame belongs to Signature Course No. 347, CISSP Readiness, and is not re-taught here — and security foundations are assumed, never re-taught. If a concept feels like it starts one step too late, the missing step is foundation material, and the honest move is to go and get it before returning.
What you will learn
- Draw the shared-responsibility line for any cloud service — by service model, by provider, and by contract — and name the duty that stays yours at every layer
- Read a cloud estate whole: its accounts, regions, services, and data stores, and say where its design will fail before it does
- Design a cloud reference architecture — landing zone, guardrails, network and logging planes — that a team can build and an auditor can follow
- Guard cloud data across its whole lifecycle: classify it, place it in the right storage architecture, control its movement, encrypt it under keys you govern, and destroy every copy on schedule
- Judge tenant isolation and build cloud network controls that hold on infrastructure you do not own
- Secure cloud applications end to end: federated identity for people and workloads, a pipeline that cannot ship the same flaw twice, and application controls fit for rented infrastructure
- Operate and answer for the estate: one evidence timeline across providers, incident response for infrastructure that disappears, and assurance — residency, discovery, and provider audit — you can prove with the cloud's own vocabulary
Everything in the course
- All 18 concepts of CCSP Readiness: Cloud Security at the Professional Level, in 2 modules
- A starting-point check first — the Coach finds where you actually stand before teaching
- Learn, Practice, Prove for every concept — no passive video watching
- A test-out on every concept: prove you know it and move on
- The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
- A personal Learner Record of your work across the course
- Two capstone exercises: The Estate Blueprint and The First Ninety Days Live
- A printable session summary whenever you pause
- The Lighthouse Coach completion certificate (Signature Series)
- Your progress is saved as you go — stop anytime, resume where you left off
Built for the practitioner taking the cloud security seat
Security practitioners moving into cloud work and cloud engineers taking on the security seat — who already think in controls, evidence, and risk, and need the cloud translation of that thinking, including every place where the translation changes the answer.
Experienced generalists preparing for the CCSP examination — who want the specialist's depth rather than a second tour of the generalist's map.
This course assumes security foundations already in place — the working fluency a Security+ holder or a CISSP-adjacent practitioner carries. If you do not yet hold those foundations, this is not your next course; No. 347 is, and this book will still be here, and will make more sense, when you come back to it.
Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.
Start with Shared Responsibility by Service Model
$195 — introductory price. One payment. No subscription, no password to manage.
Here is exactly what happens when you enroll:
- Pay securely with Stripe — you are taken straight into the course
- Create your learner profile and begin the Module 1 starting-point check
- Save the access key you are given — it restores your enrollment on any device
- Learn at your pace; your progress is stored in your browser on your device
For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.
Before you enroll
What is a Socratic coaching session?
A conversation, not a video. Your coach asks a question; you answer — out loud by voice, or by typing — and the coach responds to what you said: naming the misconception it hears, affirming what you got right, and asking the next question. You advance only when you have mastered each concept, so a finished course means the learning held.
How long does it take — and how long do I have?
About 30 minutes per concept. Learn in sittings of any length; your progress is saved as you go. You have a full year from purchase to finish, and you can revisit and retake within that year.
What does the certificate verify?
That you completed every concept and both capstones of this course. Anyone can confirm a Cognosco certificate online — enter its certificate ID on our verification page.
What if it isn't for me — what are the refunds?
If you have not started, cancel for a full refund within seven days of purchase. Once you have started, there is no cash refund — stop before finishing and we credit the full amount you paid toward any other course in the library (credit valid one year from your original purchase). Once you complete the course, no refund or credit applies.
More Signature Courses are coming
CCSP Readiness: Cloud Security at the Professional Level is Signature Course No. 410. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.