Certified Cloud Security Professional credential artwork

Certified Cloud Security Professional (CCSP)

Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.

Summary

CCSP is ISC2's vendor-neutral credential for securing cloud environments, aimed at experienced security professionals who design or govern cloud systems. It covers cloud architecture, data, platforms, applications, operations, and legal and compliance issues, and works as a cloud specialization for CISSP holders.

Good fit if

  • You secure or govern cloud workloads and want a vendor-neutral credential
  • You hold CISSP and want a cloud specialization
  • Cloud security architect or GRC roles you target list CCSP

Look elsewhere if

Salary & jobs

Prerequisites

Experience required for certification

5 years in IT, including 3 in cybersecurity

Required

At least one of those years must be in one or more of the six CCSP domains. Experience is checked through endorsement after you pass.

Standard route5 years IT, 3 in cybersecurity, 1 in a CCSP domain
Relevant degree or CSA CCSK4 years; only one year can be waived
Active CISSPCovers the whole experience requirement

You can sit the exam first. Without the experience you become an Associate of ISC2 and have six years to earn it. After passing, submit your endorsement within nine months.

Cost

USD · US exam pricing · new ISC2 member
$599
$135
The $135 annual maintenance fee recurs and covers all your ISC2 certifications, so a current CISSP pays no extra. Rescheduling costs $50 and cancelling $100. Each retake is charged at the full exam fee.

What holders say

Covers governance that platform certifications do not

A federal IT instructor describes vendor certifications as proving you can secure one platform, while CCSP covers shared responsibility, data residency and compliance across providers.

Certification path

Renewal

CCSP renews every three years through continuing education and an annual fee.

Renewal cycle
3 years
Continuing education
90 CPE credits
Maintenance fee
$135 / year USD

At least 60 credits must be Group A, related to the CCSP domains; the other 30 can be Group A or professional-development Group B. One annual fee covers every ISC2 certification you hold.

ISC2 member policies ↗

Alternatives

FAQ

What are the CCSP requirements?

Five years of paid IT experience, including three in cybersecurity and one in a CCSP domain. A relevant degree or CSA’s CCSK waives one year, and an active CISSP covers the whole requirement. You can take the exam before you have the experience.

How much does the CCSP cost?

The exam costs $599 in the US. After passing, the first $135 annual maintenance fee completes certification. Preparation is extra.

What changed in the CCSP exam in 2026?

A new outline took effect on August 1, 2026, with updated weights and explicit AI and machine-learning security topics. The exam has been adaptive, with 100 to 150 questions in three hours, since October 2025.

Is CCSP harder than CISSP?

They test different ground. CISSP is broader; CCSP goes deeper into cloud data, platform and application security and cloud legal issues. CISSP holders often find the governance material familiar.

CCSP or an AWS or Azure security certification?

CCSP is vendor-neutral and covers architecture, governance and compliance across providers. Platform security certifications test hands-on skills on one cloud. Many cloud security architects hold both.

Last updated October 2026