Express Tabletop: The Cloud Account No One Was Watching Express Course

Product Details

The exercise in this course begins with what appears to be a minor help desk concern. You will place yourself in the role of incident responder, think about where cloud identity evidence resides and follow the evidence from its source. You will be tasked with understanding the concern rather than immediately fixing it, considering identity, privilege and data access to apply best practices.

Learning Experience:

• Audio and text-based content
• Branching scenario
• Check your understanding questions 
• Validation of completion 
• 24/7/365 technical support 

---

Who Will Benefit

This course is designed for cybersecurity professionals who want to move beyond reactive troubleshooting and develop investigative approaches that align with cloud security and incident response best practices. It is relevant for those in or considering roles of incident responder, security analyst or cloud administrator who need to strengthen their ability to investigate identity-related concerns.

Learners should have a foundational understanding of cloud services, authentication and authorization concepts, and basic incident response practices.

---

Key Topics

• Incident response
• Cloud security
• Identity and access management (IAM)

---

Learning Outcomes

• Evaluate potential response actions in a cloud‑security incident scenario to determine evidence‑preserving and impact‑aware next steps that support an effective investigation and organizational response.

---

Benefits

• Build practical skills with scenario-based training to help you evaluate and respond effectively to real-world cloud security incidents
• Gain expertise in emerging cybersecurity topics
• Participate in activities centered on real-world applications
• Earn CPE credits

---

Program Completion

Learners have 60 days from the date of purchase to complete the entire course. Those who successfully complete this course will receive a digital Validation of Completion and earn continuing professional education (CPE) credits. We recommend that you download and retain the Validation of Completion for your personal records.

To receive a Validation of Completion and earn CPE credits, learners must:

• Complete the learning experience
• Pass the assessment
• Complete the learning experience evaluation

---

Credit Info

CPE Credits	Group A	0.5
Field of Study	Security Operations
Level	Intermediate
Prerequisites	A foundational understanding of cloud services, authentication and authorization concepts, and basic incident response practices.
Access	Online	This is a digital product. The content will be available up to 60 days after purchase date.

For more information, please refer to the ISC2 Certification Maintenance Handbook for additional CPE requirement details.

---

CPE Credit Reporting

CPE credits earned from this learning experience will automatically be reported for ISC2 credentials on the first day of every month. Please allow up to 10 business days for processing.

CPE credits earned for this learning experience may also be eligible for continuing professional education credits for non-ISC2 certifications. Please visit the continuing education requirements established by the credentialing organization for eligibility.

For questions related to ISC2 CPE credits or the CPE portal not covered in the handbook, please contact us via our online form.

Delivery

A stable internet connection is required. To record your completion of the online learning experience, please ensure you are connected to the internet at all times.

---

Cancellation Policy

Refunds are not provided for ISC2 learning experiences.