ISC2
CCSP
Certified Cloud Security Professional
An advanced cloud security certification from ISC2 for security professionals designing and managing secure cloud environments. Highly valued for cloud security architect and engineer roles.
What's on the exam
CCSP Exam Outline (effective August 1, 2026)
Cloud Concepts, Architecture, and Design
17%Cloud computing concepts and roles · Cloud reference architecture · Security concepts and design principles · Evaluating cloud service providers · AI/ML concepts in the cloud
Cloud Data Security
20%Cloud data lifecycle · Data storage architectures · Data classification and discovery · Encryption, tokenization, and masking · Information rights management (IRM) · Data retention, deletion, and archiving · Protecting AI/ML data
Cloud Platform and Infrastructure Security
17%Cloud infrastructure components · Risk analysis and assessment · Security controls design · Business continuity and disaster recovery · Network and compute security
Cloud Application Security
16%Secure software development lifecycle · Application security testing · DevSecOps and supply chain · Identity and access management · APIs and verified secure software
Cloud Security Operations
17%Physical and logical infrastructure operations · Operational controls and monitoring · Change and configuration management · Security operations center practices · Digital forensics and incident management
Legal, Risk, and Compliance
13%Legal requirements and risks · Privacy issues and regulations · Audit processes and assurance · Enterprise risk management · Vendor and contract management
Frequently asked questions
How much does the CCSP cost?
The CCSP costs $599. US$599 exam fee plus an ISC2 annual maintenance fee after certification; confirm current pricing with ISC2.
How long is the CCSP and how many questions does it have?
100–150 items — Up to 3 hours.
What do you need to pass the CCSP?
700 on a scale of 1000.
Can you retake the CCSP?
Tiered waiting periods; up to 4 attempts per 12-month period.
What is the best way to study for the CCSP?
Start from the official outline and your primary study materials: the exam is weighted by domain (Cloud Concepts, Architecture, and Design 17%, Cloud Data Security 20%, Cloud Platform and Infrastructure Security 17%, Cloud Application Security 16%, Cloud Security Operations 17%, Legal, Risk, and Compliance 13%). Once you've learned the material, spaced-repetition flashcards organized by those domains are an efficient way to retain it and refresh it before test day.
Program in development
We're building a program for this exam. Meanwhile, explore live programs across 84 exams.
Explore programs →