Decide on the credential before buying a course
ISC2 Certified Cloud Security Professional (CCSP) is for experienced people responsible for cloud security design, data protection, platform and application controls, operations and compliance. It is vendor-neutral. It does not replace practical work in your organization's cloud platform, and a course completion does not grant the certification.
- Already operating cloud security controls: Map your work against the six August 1, 2026 exam domains. If gaps are narrow, public official reading and focused permitted practice may fit better than broad instruction. Research and exercises are optional.
- Less than five years of qualifying experience: You may take the exam, but passing does not immediately make you a CCSP. The Associate of ISC2 route gives you six years to earn and document the required experience. Decide whether that interim status serves your employer's requirement before spending.
- Employer or team buyer: Name the actual cloud platform, data classification, shared-responsibility boundary and job tasks. Ask which ISC2 outline version, labs, exam voucher, retake terms and approval evidence a class provides. Do not assume a generic cloud class solves a role-specific gap.
What is on the August 2026 exam
ISC2's current CCSP outline lists six domains and average weights. The weights are not exact question counts. The August 2026 outline assigns 16% to application security and 17% to operations. Use the linked official outline for the full task statements rather than relying on a copied syllabus.
| Domain | Average weight | Decision or practice prompt |
|---|
| Cloud Concepts, Architecture and Design | 17% | Can you explain the customer's and provider's different responsibilities in a real service model? |
| Cloud Data Security | 20% | Can you classify, protect, retain and delete data across regions and services? |
| Cloud Platform & Infrastructure Security | 17% | Can you design boundaries, resilience and recovery rather than recite product names? |
| Cloud Application Security | 16% | Can you assess identity, software supply-chain and deployment risks? |
| Cloud Security Operations | 17% | Can you operate monitoring, incident response and change control? |
| Legal, Risk and Compliance | 13% | Can you translate requirements into an auditable cloud control decision? |
Optional original fictional work: an invented company stores parcel records in a cloud service. On paper, map the data flow and customer/provider responsibilities, assign identity and key controls, identify incident evidence and retention limits, and propose a reversible recovery check. Record assumptions and unresolved questions for a reviewer. Use invented details; no account, real records, deployment or spending is required. This is a Learnerside exercise, not an official exam item or readiness score.
The official outline lists a three-hour adaptive exam with 100-150 items, multiple-choice and advanced item types, and a 700/1000 scaled passing grade. That is not a 70% candidate pass rate. Check your language, test-center and accommodation options before booking; localized appointment availability can differ. No training provider can guarantee a pass.
Experience: exam access is not full certification
For full CCSP status, ISC2 requires five years of cumulative IT experience, including three years in cybersecurity and one year in one or more current CCSP domains. Qualifying part-time work and internships may count under ISC2's documentation rules. A qualifying degree or CSA CCSK can substitute for up to one year; the two one-year routes do not stack. An active CISSP can substitute for the full CCSP experience requirement. Check endorsement and membership obligations in ISC2's current process.
These are certification rules, not a prohibition on sitting the exam. A person who passes before meeting the experience rule can become an Associate of ISC2 and has six years to earn the five years. Describe yourself as an Associate until ISC2 awards full CCSP status; do not put "CCSP certified" in a proposal or resume prematurely.
Exam price, self-study and paid instruction
ISC2's exam-pricing table showed U.S. $599 standard CCSP registration for the Americas and other regions not separately listed on September 29, 2026. It listed different EMEA and U.K. amounts. Pricing and tax depend on where the exam is administered, and Pearson shows final terms at registration. The exam fee is not a course fee, retake guarantee, or all-in cost.
Public reading can start with the current outline, ISC2's self-study resource hub, its flash cards and community materials, plus an authorized practice workload. The hub also offers paid self-paced training; "self-study" does not mean every resource is free. If you need structured discussion or feedback, ISC2's online instructor-led CCSP training offers full-time and part-time formats with "Training + Exam" and "Training Only" choices. A public course description is not a verified seat or price for your date. Confirm the course follows the August 2026 outline and ask for schedule, time zone, recordings, lab access, exam-voucher inclusions, retake, cancellation and total per-learner cost before approval.
After certification, ISC2's annual maintenance fee policy lists a U.S. $135 member fee for CCSP holders, paid once per year even if a member holds multiple listed ISC2 certifications; ongoing CPE requirements also apply. The October 9 membership reference above specifies 90 CPE over three years: 60 Group A plus 30 Group A or B; 30 annually is suggested. Associate status separately requires USD 50 annual maintenance and 15 Group A CPE annually. First maintenance payment follows application approval before certification grant. Tuition, tax, retakes and extensions are separate; unknown tuition is not zero. Check your account's terms rather than multiplying a per-certification fee.
Roles, salary and next action
CCSP can support cloud security architecture, engineering, operations, risk and governance work when your experience matches the role. It does not confer a job or a specific salary. Occupation-level wage data cannot isolate CCSP holders; this page does not invent a credential salary premium.
Compare the qualification path, practical gaps and a written total for any class. You can ask for help immediately; research, exercises and qualification checks are not prerequisites for a request. Draft an employer brief or send a short request with your platform, format and timing. Sending a request does not authorize Learnerside to share your details with ISC2 or a training provider; that requires separate consent naming the recipient.
Sources and limits
Learnerside is independent of ISC2. This page paraphrases issuer material; it does not reproduce exam questions, endorse a seller or promise a pass, job or salary.