CCAK Certification Training
- Home
- ISACA Training
- CCAK
"Audit cloud environments with cloud-native methodology"
CCAK is the right credential for IS auditors who regularly audit cloud environments — Azure, AWS, and GCP infrastructure, SaaS applications, and cloud-native architectures. As DoD contractors move workloads to Azure GovCloud and AWS GovCloud, the ability to audit cloud environments with cloud-native methodology becomes a critical IS audit competency.
CCAK Exam Preparation — Cloud Audit for IS Auditors and Cloud Practitioners
The CCAK (Certificate of Cloud Auditing Knowledge) is a joint credential from ISACA and CSA (Cloud Security Alliance) — providing IS auditors and cloud practitioners with the methodology to audit cloud environments using cloud-specific frameworks, including the CSA Cloud Controls Matrix (CCM). VIS LLC's CCAK training prepares practitioners for the CCAK exam.
Key Features
CSA Cloud Controls Matrix (CCM) coverage
Thorough training on the CSA Cloud Controls Matrix — the foundational cloud security and audit control framework — including how to map CCM controls to audit objectives and use CCM as the basis for cloud-specific audit programs.
Cloud audit methodology and evidence
Learn cloud-native audit methodology — how to gather evidence from cloud provider APIs and logs, conduct shared responsibility reviews, and adapt traditional IS audit procedures for cloud environments where physical access is not available.
Cloud-specific governance and risk
Understand the governance and risk considerations unique to cloud environments — multi-tenancy risk, data residency, cloud provider concentration risk, vendor lock-in, and the governance implications of the shared responsibility model.
Cloud service models (IaaS/PaaS/SaaS) audit
Develop distinct audit approaches for IaaS, PaaS, and SaaS environments — covering how control ownership, evidence availability, and audit scope differ across each service model and the implications for audit planning and reporting.
FedRAMP and cloud compliance context
Understand how FedRAMP, StateRAMP, and DoD IL authorizations apply to cloud audit engagements — including how to assess cloud service provider authorization status and what CSP compliance certifications mean for the auditee's risk posture.
ISACA and CSA CCAK certification alignment
All training content is mapped to the official CCAK exam content outline jointly published by ISACA and CSA, with practice questions, domain weighting guidance, and exam strategy to prepare candidates for the CCAK certification exam.
Ready to advance your ISACA certification?
VIS LLC offers live exam preparation by active GRC practitioners. Individual and group training available.