CCSP
Certified Cloud Security Professional

Overview

The Certified Cloud Security Professional (CCSP) shows that a person can design, run, and assess security for cloud services, whether they're public, private, or hybrid. The exam covers 6 domains, from cloud concepts and architecture through to data security, application security, operations, and the legal, risk, and compliance questions that come with outsourced infrastructure. It's vendor-neutral. Holders tend to work as cloud security architects, cloud engineers, security consultants, or security managers who oversee cloud adoption.

Candidates need 5 years of cumulative, full-time IT experience, with 3 years in cybersecurity and 1 year in at least 1 of the 6 CCSP domains. An active CISSP satisfies the whole experience requirement. The Cloud Security Alliance's CCSK certificate or a related degree can replace 1 year, and people who pass without enough experience can become an Associate of ISC2. Compared with provider-specific security certifications, which test one vendor's tools, CCSP stays at the level of principles and controls that apply across providers. ISC2 updated the exam outline on August 1, 2026. Holders renew every 3 years.

What the exam covers

The CCSP exam outline effective August 1, 2026 organizes the exam into 6 domains, each with a published weight.

Requirements

At least 5 years of cumulative, full-time IT experience, of which 3 years must be in cybersecurity and 1 year in 1 or more of the 6 CCSP domains. An active CISSP satisfies the entire requirement, the Cloud Security Alliance's CCSK certificate or a post-secondary degree in computer science or IT can waive 1 year (1 year at most), and candidates who pass without the experience can become an Associate of ISC2 and have 6 years to earn it.

Format

Computerized adaptive testing (CAT) with multiple-choice and advanced item types, offered in English, Chinese, Japanese, and German (Chinese only in select appointment windows)

Questions

100 to 150

Time

3 hours

Passing score

700 out of 1000

Delivery

Pearson test centres

After passing, candidates must complete the certification application within 9 months of the exam date, including endorsement by an ISC2-certified professional in good standing or by ISC2 itself with proof of employment. Applicants also agree to the ISC2 Code of Ethics.

Cost

Exam fee: USD 599. Standard registration price for the Americas on the ISC2 exam pricing page, checked October 12, 2026. ISC2 doesn't publish a separate Canadian price on that page, and taxes depend on the testing location. Prices change, so confirm with ISC2 before registering.

Keeping it current

Cycle

3 years

Continuing education

90 CPE credits per 3-year cycle (at least 60 in Group A), with about 30 a year suggested

Fees

USD 135 annual maintenance fee (one fee covers all ISC2 certifications a member holds)

How to verify that someone holds it

Employers can confirm status on the ISC2 member verification page. ISC2 also issues each active certification as a Credly badge that links to a live verification page. Use the issuer’s verification page.

On InfoSecHub, a CCSP listed on a profile shows Verified by Credly only when a current Credly badge issued to that person confirms it.

In Canada

ISC2 has local chapters in Canada, including in Toronto, Ottawa, and Vancouver.

Typical roles

• Cloud security architect
• Cloud security engineer
• Security consultant
• Security manager
• Security architect

Related frameworks

• ISO 27001
• ISO 27017
• ISO 27018
• CSA STAR
• GC cloud Protected B

References

1. CCSP certification exam outline, ISC2
2. ISC2 exam pricing, ISC2
3. Member policies (CPE requirements), ISC2
4. Annual maintenance fees, ISC2
5. ISC2 digital badges, ISC2

Reviewed 2026-10-12. Exam details, prices, and renewal rules change. Confirm them on the ISC2 website before you register. InfoSecHub is not affiliated with ISC2.