Skip to content
FreeISC2 Certified in Cybersecurity (CC) preparation is free on iSecPath — permanently, not a trial.See pricing
iSecPathiSecPath

ISC2

ISC2 Certified Cloud Security Professional (CCSP)

Vendor-neutral cloud security architecture, data lifecycle, platform security, operations and legal risk.

Coming soon
Required exam: CCSP · ~96 hours · 6 domains

Certification and exam

Certification provider
ISC2
Official certification name
ISC2 Certified Cloud Security Professional (CCSP)
Required exam
CCSP — Certified Cloud Security Professional exam
Current exam version · effective 2022-08-01 · no retirement date announced

Grouped in our Specialist plan based on where it fits in your learning path. This is independent of ISC2's own certification naming and tier structure.

iSecPath preparation scope

  • Cloud architecture and shared-responsibility reasoning
  • Data lifecycle and cryptography decisions
  • Cloud operations and continuity scenarios
  • Legal, risk and compliance practice

What is and is not included

  • Included: iSecPath learning access for the term of your plan.
  • Not included: the external ISC2 certification exam.
  • Not included: exam registration and scheduling.
  • Not included: the exam fee.
  • Not included: meeting ISC2's eligibility requirements.

iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.

Prerequisites and eligibility

Set by ISC2, not by iSecPath. Confirm against the official source before you register.

Prerequisites

  • ISC2 requires qualifying paid work experience, or Associate of ISC2 status while you earn it.

Eligibility requirements

  • Five years cumulative paid information technology work experience, including three years in information security and one year in a CCSP domain — as defined by ISC2.
  • Holding CISSP can satisfy the experience requirement per ISC2's published substitution rules.
  • Endorsement and ISC2 membership are required before certification is granted.

Experience requirements

Authoritative ISC2 experience requirement — confirm the current wording on the ISC2 CCSP page before relying on it.

Exam domains

Approximate weighting used to structure our learning path. Verify against ISC2's published blueprint.

  • Cloud Concepts, Architecture & Design17%
  • Cloud Data Security20%
  • Cloud Platform & Infrastructure Security17%
  • Cloud Application Security17%
  • Cloud Security Operations16%
  • Legal, Risk & Compliance13%

Sample scenario

Residency versus resilience

A regulator requires data residency in one country; your resilience target requires multi-region replication. Propose an architecture and state the residual risk you are accepting.

Focus: Legal, Risk & Compliance

Career path mapping

iSecPath Recommended Path. Mapping types describe our learning-path logic — "Prerequisite" is used only where the provider authoritatively requires it.

Cloud Security

Alternative

Vendor-neutral alternative when you work across multiple clouds.

Security Architecture

Complementary

Cloud architecture and legal-risk breadth.

Source of truth

Operational owner
iSecPath Curriculum Operations
Last verified
2026-08-24
Next review
2026-11-24
Verification notes
Experience substitution rules change. Re-verify the exam outline effective date and experience wording each quarter.

Provider information is rechecked at least quarterly and whenever ISC2 announces a material change. Exam versions here are a snapshot, never a permanent source of truth.