Course
Closed Circuit Secure Intelligence Officer
A practical course for the people responsible for running closed-circuit, attested AI and data environments: security officers, platform leads and compliance owners. Ten modules, 30 lessons (about 6.6 hours of reading), a narrated video per module, module quizzes and a 24-question practice exam.
Your progress
Loading…
Syllabus
Module 01
Threat models and the trust boundary
Why data in use is the gap that encryption at rest and in transit leaves open, who confidential computing defends against, and how to draw the trusted computing base for a real system.
- Data in use: the missing third state · 12 min
- Adversaries: who a TEE defends against · 14 min
- Drawing the trust boundary and TCB · 15 min
video 2 min · 6-question quiz
Module 02
Trusted execution environments: SGX, TDX, SEV-SNP and Arm CCA
How the major CPU TEE families work, what each one puts inside the trusted computing base, and what their measurements and attestation reports look like.
- Enclaves versus confidential VMs · 12 min
- Intel SGX and Intel TDX · 15 min
- AMD SEV-SNP and Arm CCA · 15 min
video 2 min · 6-question quiz
Module 03
Remote attestation and verifiers
The IETF RATS architecture (RFC 9334): roles, evidence, endorsements, reference values, appraisal policy, freshness, and the passport and background-check models.
- RATS roles and artifacts (RFC 9334) · 15 min
- Appraisal, freshness and binding · 15 min
- Passport and background-check models · 12 min
video 1 min · 6-question quiz
Module 04
AWS Nitro Enclaves and attestation documents
How Nitro Enclaves isolate a workload from its parent EC2 instance, what the six measurements mean, how attestation documents are structured, and how AWS KMS uses them.
- The Nitro Enclaves isolation model · 12 min
- Measurements and attestation documents · 16 min
- Operating enclaves with nitro-cli · 12 min
video 2 min · 6-question quiz
Module 05
Google Cloud Confidential VMs, Confidential Space and Azure confidential computing
The confidential computing offerings of Google Cloud and Microsoft Azure: confidential VMs on AMD SEV, SEV-SNP and Intel TDX, Confidential Space for multi-party workloads, and Microsoft Azure Attestation with secure key release.
- Google Cloud Confidential VMs · 12 min
- Confidential Space for multi-party workloads · 15 min
- Azure confidential computing, attestation and secure key release · 15 min
video 2 min · 6-question quiz
Module 06
Key management and attestation-bound secret release
Designing key hierarchies where secrets reach a workload only after attestation, writing KMS policies bound to measurements, and governing those policies with separation of duties.
- The attested key release pattern · 14 min
- Policies across AWS, Google Cloud and Azure · 12 min
- Custody, separation of duties and rotation · 13 min
video 1 min · 5-question quiz
Module 07
Confidential AI and GPU TEEs
Protecting model weights, prompts and training data with confidential VMs and NVIDIA H100 confidential computing: CC modes, encrypted bounce buffers, GPU attestation, and composite attestation of CPU plus GPU.
- AI assets and threat model · 12 min
- NVIDIA H100 confidential computing · 15 min
- Composite attestation for AI workloads · 13 min
video 1 min · 6-question quiz
Module 08
Supply chain, reproducible builds and measurements
Attestation proves which bytes are running. This module makes sure those bytes are the ones you reviewed: reproducible builds, image signing, provenance, and managing reference values across releases.
- From source code to measurement · 12 min
- Reproducible builds and independent verification · 13 min
- Pinning versus signing, and reference-value governance · 12 min
video 1 min · 6-question quiz
Module 09
Operations, vulnerability response and audit
Running confidential workloads day to day: monitoring attestation, responding to hardware and firmware advisories with TCB recovery, investigating incidents with audit logs, and preparing evidence for auditors.
- Monitoring attestation in production · 11 min
- Advisories and TCB recovery · 14 min
- Incident investigation and audit evidence · 13 min
video 1 min · 6-question quiz
Module 10
Capstone: secure design review
Apply the whole course to one scenario: review a confidential multi-party analytics and inference service, find the gaps, and produce the design review an officer would sign.
- The scenario · 10 min
- Reference design review · 16 min
- Officer checklist and the proctored assessment · 9 min
video 1 min · 5-question quiz
Final
Practice exam
24 questions across all modules. Pass mark 80%. Self-assessment only: the official certificate requires a proctored assessment.
Outcomes
- Explain the guarantees and limits of confidential computing to technical and non-technical stakeholders
- Operate attestation-based access to keys and data, including failure and recovery cases
- Approve, track, and roll out changes to enclave images and platform firmware safely
- Run incident response in an environment where data in use must stay confidential
- Assemble the evidence needed for a CCSI business certification or an external audit
Format and certification
Self-paced online
All modules, videos, quizzes and the practice exam on this site are free to use. Progress is stored only in your browser.
Official certificate
The CCSI Officer certificate is issued by CCSI only after a proctored assessment, including a capstone design review. Completing the online material alone does not grant a certificate. CCSI does not claim accreditation by any external body for this course.
Prerequisites and pricing
Working familiarity with cloud infrastructure and basic security concepts. Proctored assessment and instructor-led cohorts: pricing on request via the contact form.