The path teaches you to use the cloud without losing control of what you put in it: what always remains the customer's responsibility, how identity and access are governed, how configuration is kept under control, how data and keys are protected, how an incident is detected and responded to, and what a contract must say so that you can also exit.
The common thread is that the provider is accountable for the security of the cloud, the customer for security in the cloud: almost all documented incidents originate in the second half, and no contract transfers it.
Who it is for: IT and security managers, system and cloud platform administrators, DevOps, architects, procurement and compliance managers, NIS contacts and DPOs of organisations that use cloud services or are moving services to the cloud.
Estimated duration: 26 hours. 6 modules, 96 test questions, 6 exercises, final test and named certificate.
Content updated to October 2026 on Directive (EU) 2022/2555 and Legislative Decree 138/2024, Implementing Regulation (EU) 2024/2690, Regulation (EU) 2023/2854 (Data Act), Regulation (EU) 2022/2554 (DORA), Regulation (EU) 2016/679, ISO/IEC 27017 and 27018, CSA Cloud Controls Matrix and on guidance from ACN, ENISA and CISA.
Unlock-based progression: each module's test and exercise open once you pass the previous module's test (threshold 70%, unlimited attempts). At the end, a final test of 30 questions on the whole path, with three attempts one week apart, and, on passing, the PDF certificate with verification code.