CCSP
ISC2 CCSP - Certified Cloud Security Professional
Advanced cloud security certification
Issued by ISC2
Visit official certification page
6
Domains
10+
Skills
6
Prep Links
3
Practice Quizzes
Cost
USD $599 (Americas/APAC/MEA) / EUR 575.04 / GBP 485.19
Duration
3 hours
Questions
100-150 (delivered via CAT)
Pass
700 / 1000 (scaled)
Delivery
Pearson VUE Testing Center (worldwide)
Validity
3-year cycle
Quick Facts
Cost
USD $599 (Americas/APAC/MEA) / EUR 575.04 / GBP 485.19
Duration
3 hours
Questions
100-150 (delivered via CAT)
Passing score
700 / 1000 (scaled)
Languages
English, Chinese, Japanese, German
Delivery
Pearson VUE Testing Center (worldwide)
Validity
3-year cycle
AMF
USD $135/year (covers all Advanced ISC2 certs)
Skills You'll Learn
Apply cloud-native security architecture and design principles across IaaS, PaaS, SaaS.
Secure data in the cloud using DLP, encryption, tokenization, masking, IRM.
Classify data, manage lifecycle phases, satisfy data privacy and regulatory requirements.
Plan and operate secure cloud infrastructure with strong identity, network, and physical controls.
Build application security throughout the cloud SDLC including supply chain and IAM.
Run cloud security operations - SOC, log capture, incident response, digital forensics.
Plan business continuity and DR for cloud workloads using replication and failover.
Navigate legal, risk, and compliance requirements unique to cloud.
Demonstrate cloud-specific knowledge that complements general cybersecurity credentials.
Earn ISC2's premier cloud security credential - ANAB-accredited and DoD 8140-approved.
Exam Logistics
- Question types: multiple choice + advanced item types via CAT.
- Continuous registration; appointments available 48 hours after fee payment.
- Reschedule fee: USD $50. Cancellation fee: USD $100.
- Retake: 30/60/90-day waits after 1st/2nd/3rd attempts; max 4 per 12 months.
- Chinese exams in select windows.
- ANAB-accredited; DoDM 8140.03-approved.
Prerequisites & Recommended Experience
- Minimum 5 years cumulative IT experience; 3 years in info security AND 1 year in 1+ of the 6 CCSP CBK domains.
- Degree waiver: post-secondary CS/IT/related degree waives 1 year.
- CCSK substitution: waives 1 year of cloud experience.
- CISSP substitution: active CISSP substitutes the ENTIRE CCSP experience requirement.
- Associate of ISC2 path available; endorsement required; commit to Code of Ethics.
6 CBK Domains with Weights (effective October 1, 2025)
Domain 1: Cloud Concepts, Architecture and Design
17%
- Cloud concepts, roles, characteristics.
- Cloud reference architecture.
- Security concepts relevant to cloud computing.
- Design principles of secure cloud computing.
Domain 2: Cloud Data Security
20%
- Cloud data concepts, storage architectures, lifecycle phases.
- Data security technologies (DLP, encryption, tokenization, masking, IRM).
- Data classification, discovery, jurisdictional requirements.
- Information rights management; retention/deletion/archiving.
- Auditability, traceability, accountability (chain of custody, eDiscovery).
Domain 3: Cloud Platform & Infrastructure Security
17%
- Cloud infrastructure components and risks.
- Security controls planning and implementation.
- Business continuity and disaster recovery.
Domain 4: Cloud Application Security
17%
- Training and awareness for application security.
- Cloud SDLC and Application Security Verification Standard.
- IAM and supply-chain management.
- Cloud application architecture; assurance and validation.
Domain 5: Cloud Security Operations
16%
- Physical and logical infrastructure.
- Operational controls (ITIL/ISO 20000).
- Digital forensics; stakeholder communication.
- Security operations management (SOC, log analysis, incident management).
Domain 6: Legal, Risk and Compliance
13%
- Legal requirements and cloud-specific risks.
- Privacy issues; audit process and methodologies.
- Enterprise risk management; outsourcing and contract design.
Official Prep Resources
Test what you've learned
Take a free GoLearnQuiz practice test. Sign in to save your score.
Additional Helpful Details
- A future outline takes effect August 1, 2026 - check the live page if scheduling around that date.
- Education Guarantee: learners who don't pass on first attempt may access the training again at no cost within one year.