Successfully passed the « Certificate of Competence in Zero Trust » (CCZT), the first Zero Trust certificate in the industry

I february 2024, I successfully passed the Certificate of Competence in Zero Trust (CCZT) from the Cloud Security Alliance (CSA).

This certificate is a logical follow-up to the CCSK (Certificate of Cloud Security Knowledge) awarded by the same CSA organization (to know more about CCSK, read my article here).

Zero Trust Philosophy is :

• Never Trust Always verify
• Assume a hostile environment
• Assume breach
• Scrutinize explicitly
• Apply unified analytics

The CCZT is considered the first Zero Trust certificate in the industry, developed by combining the guidance of Zero Trust experts, foundational documents from authoritative sources, and leadership from vendor-neutral CSA Research.

Building on the foundational principle of Zero Trust that no part of a computing and networking system can be implicitly trusted, CCZT will give you the knowledge and skills necessary to implement a Zero Trust strategy and reduce systemic risk.

CCZT outlines how to put specific measures in place to provide assurance that systems and their components operate appropriately and are continuously verified.

CCZT enables you to understand and implement Zero Trust principles into business planning, enterprise architectures, and technology deployments.

The Certificate of Competence in Zero Trust consists of the following topics:

• Introduction to Zero Trust Architecture (ZTA)
• Introduction to Software-Defined Perimeter (SDP)
• ZT Planning
• ZT Implementation

Recommanded authoritative sources :

• CISA Zero Trust Maturity Model
• NSTAC Report to the President on Zero Trust
• NIST Zero Trust Architecture (SP.800-207)

Special thank’s to Rajan Iyer and Abdulrahman Alkayali who inspired me to write this post.

Congratulations to Troy Leach and Dominik Vleming for the quality of this program

To know more about CCZT and CSA : https://cloudsecurityalliance.org/education/cczt

I also wrote a post here where I explain :

• What is Zero Trust Architecture (#ZTA)
• What is Certificate of Competence in Zero Trust (#CCZT)
• Who is #CCZT for
• What is the #CCZT exam structure
• What does #CCZT cover
• How do I prepare for the #CCZT exam
• What is the cost