Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ISC
Exam Format
3 hr
125 questions (100-150 in CAT format)
700 out of 1000 points
Professional
Registration
$749 USD
Pearson VUE or online proctoring
Validity
3 years
Earn 90 Continuing Professional Education (CPE) credits over 3 years; Minimum 30 CPE credits per year; Pay Annual Maintenance Fee (AMF) of $125
CCSP Exam Topics and Domains
CCSP is organized into 6 weighted domains. Expect to work with Docker, Kubernetes, AWS CloudHSM, AWS Lambda, and more.
1
Cloud Concepts, Architecture and Design
17%
Understand Cloud Computing Concepts
Cloud Computing DefinitionsCloud Computing Roles and Responsibilities
- Define cloud computing according to ISO/IEC and NIST standards
- Identify the five essential characteristics of cloud computing
- Differentiate between cloud computing roles and their responsibilities
Describe Cloud Reference Architecture
Cloud Service ModelsCloud Deployment ModelsRelated Technologies
- Explain the differences between IaaS, PaaS, and SaaS
- Describe the four cloud deployment models
- Identify related and emerging technologies in cloud computing
Understand Security Concepts Relevant to Cloud Computing
Cryptography and Key ManagementIdentity and Access ManagementCloud Access Security Broker (CASB)Network Security
- Apply cryptographic solutions to protect cloud data
- Implement identity and access management controls
- Evaluate CASB solutions for cloud security
- Design secure network architectures in the cloud
Understand Design Principles of Secure Cloud Computing
Cloud Secure Data LifecycleCloud-Based Business Continuity and Disaster RecoveryFunctional Security Requirements
- Apply secure data lifecycle principles
- Design business continuity and disaster recovery solutions
- Evaluate functional security requirements
Evaluate Cloud Service Providers
Verification Against CriteriaSystem/Subsystem Product Certification
- Evaluate cloud service providers against industry standards
- Understand certification and attestation requirements
2
Cloud Data Security
20%
Describe Cloud Data Concepts
Cloud Data Life Cycle PhasesData Dispersion
- Understand the cloud data lifecycle
- Describe data dispersion techniques
Design and Implement Cloud Data Storage Architectures
Storage TypesThreats to Storage
- Design secure cloud storage architectures
- Identify and mitigate storage threats
Design and Apply Data Security Technologies and Strategies
Encryption and TokenizationData De-identification
- Apply encryption and tokenization technologies
- Implement data de-identification techniques
Implement Data Discovery
Data Discovery Methods
- Implement data discovery mechanisms
- Apply data classification schemes
Implement Data Classification
Classification Schemes
- Design data classification schemes
- Implement data labeling and mapping
Design and Implement Information Rights Management (IRM)
IRM Technologies
- Design IRM solutions
- Implement data rights management
Plan and Implement Data Retention, Deletion, and Archiving Policies
Data Retention and Disposal
- Plan data retention policies
- Implement secure data deletion and archiving
Design and Implement Auditability, Traceability, and Accountability of Data Events
Data Event Logging and Monitoring
- Design data event logging systems
- Implement chain of custody procedures
3
Cloud Platform & Infrastructure Security
17%
Comprehend Cloud Infrastructure Components
Physical EnvironmentNetwork and CommunicationsComputeVirtualizationStorageManagement Plane
- Understand cloud infrastructure components
- Identify security considerations for each component
Design a Secure Data Center
Logical DesignPhysical DesignEnvironmental DesignDesign Resilient
- Design secure data center architectures
- Implement resilience and redundancy
Analyze Risks Associated with Cloud Infrastructure and Platforms
Risk AssessmentCloud Vulnerabilities, Threats and AttacksRisk Mitigation Strategies
- Perform cloud infrastructure risk assessments
- Identify and mitigate cloud-specific vulnerabilities
Plan and Implementation of Security Controls
Physical and Environmental ProtectionSystem, Storage and Communication ProtectionVirtualization Systems Protection
- Plan security control implementation
- Apply protection mechanisms
Plan Business Continuity and Disaster Recovery
Business RequirementsPlan ComponentsTesting and Maintenance
- Develop BC/DR plans
- Implement and test recovery procedures
4
Cloud Application Security
17%
Advocate Training and Awareness for Application Security
Cloud Development Basics
- Promote security awareness in development teams
- Establish secure coding practices
Describe and Apply the Secure Software Development Life Cycle (SDLC)
SDLC MethodologiesBusiness RequirementsSDLC Phases and Methodologies
- Apply secure SDLC practices
- Integrate security throughout development lifecycle
Apply the Secure Software Development Life Cycle (SDLC)
Cloud-specific RisksThreat ModelingAvoid Common VulnerabilitiesSecure Coding Practices
- Identify and mitigate cloud application risks
- Apply secure coding practices
Apply Cloud Software Assurance and Validation
Testing TechniquesSecurity Testing Methods
- Apply software assurance techniques
- Implement comprehensive testing strategies
Use Verified Secure Software
Approved APIsSupply Chain ManagementOpen Source Software
- Evaluate and select secure software components
- Manage supply chain risks
Comprehend the Specifics of Cloud Application Architecture
Microservices ArchitectureServerless TechnologyContainerizationIdentity and Access Management
- Design secure cloud application architectures
- Apply architecture-specific security controls
Design Appropriate Identity and Access Management (IAM) Solutions
Federated IdentityIdentity ProvidersMultifactor AuthenticationCloud Access Security Broker (CASB)Secrets Management
- Design comprehensive IAM solutions
- Implement identity federation and MFA
5
Cloud Security Operations
16%
Build and Implement Physical and Logical Infrastructure for Cloud Environment
Hardware Specific Security ConfigurationInstallation and Configuration of Management ToolsVirtual Hardware ConfigurationRemote Access Security
- Configure secure cloud infrastructure
- Implement management and monitoring tools
Operate and Maintain Physical and Logical Infrastructure for Cloud Environment
Access Controls for Local and Remote AccessSecure Network ConfigurationOperating System HardeningAvailability Management
- Maintain secure cloud operations
- Implement availability and performance management
Implement Operational Controls and Standards
Change ManagementContinuity ManagementInformation Security ManagementConfiguration Management
- Implement operational standards
- Apply service management frameworks
Support Digital Forensics
Forensic Data CollectionEvidence Management
- Support forensic investigations
- Maintain evidence integrity
Manage Communication with Relevant Parties
Stakeholder CommunicationCommunication Planning
- Manage stakeholder communications
- Develop communication plans
Manage Security Operations
Security MonitoringIncident ManagementVulnerability ManagementNetwork Security Controls
- Implement security operations center functions
- Manage security monitoring and incident response
6
Legal, Risk and Compliance
13%
Articulate Legal Requirements and Unique Risks within the Cloud Environment
International Legal ConflictsLegal RisksLegal ControlseDiscoveryForensics Requirements
- Understand legal requirements in cloud environments
- Identify and manage legal risks
Understand Privacy Issues
Data Privacy LawsJurisdictional DifferencesPersonal Data Protection
- Understand privacy regulations
- Implement privacy protection measures
Understand Audit Process, Methodologies, and Required Adaptations for a Cloud Environment
Audit TypesAudit ScopeCloud Audit ChallengesAudit Reporting
- Plan and execute cloud audits
- Adapt audit methodologies for cloud environments
Understand Implications of Cloud to Enterprise Risk Management
Risk AssessmentRisk Management FrameworksCloud Risk ConsiderationsRisk Monitoring and Metrics
- Assess and manage cloud risks
- Integrate cloud into enterprise risk management
Understand Outsourcing and Cloud Contract Design
Contract ComponentsSupply Chain Management
- Design cloud contracts
- Manage outsourcing relationships
How do I earn this certification?
Passing CCSP earns the CCSP - Certified Cloud Security Professional certification. It sits in the Cloud Security track.
Current Level Exams
Next Level Options
Alternative Paths
- AWS-Security - AWS Certified Security - SpecialtyAWS-specific cloud security expertise
- AZ-500 - Microsoft Azure Security Engineer AssociateAzure-specific cloud security expertise
- GCP-CSE - Google Cloud Professional Cloud Security EngineerGoogle Cloud-specific security expertise
- CompTIA Cloud+ - CompTIA Cloud+General cloud knowledge, less security focused
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for CCSP.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-08-01
- Announcement date: 2024-05-15
Updates
- Generative AI Security 2024 New questions on LLM security, prompt injection, AI governance • Release date: 2024-08-01
- Zero Trust Architecture NIST SP 800-207 Expanded coverage in Domain 1 and Domain 3 • Release date: 2024-06-01
- Container and Kubernetes Security 2024 Enhanced coverage in Domain 4 (Application Security) • Release date: 2024-08-01
- Supply Chain Security 2024 New emphasis on software supply chain risks • Release date: 2024-08-01
Who should take this exam?
This exam is typically taken by Cloud Security Architects and Cloud Security Engineers.
- 5 years cumulative IT work experience
- 3 years in information security
- 1 year in one or more CCSP domains