Certified Cloud Security Professional (CCSP)
Credential: Certified Cloud Security Professional (CCSP)
Credentialing Agency: International Information Systems Security Certification Consortium, Inc. (ISC 2)
Renewal Period: 3 years
The International Information Systems Security Certification Consortium, Inc. ((ISC)2) Certified Cloud Security Professional (CCSP) credential is designed for experienced information security professionals with at least five years of full-time IT experience, including three years of information security and at least one year in one or more of the six domains of the CCSP CBK. Earning (ISC)²’s CISSP credential can be substituted for the entire CCSP experience requirement. The topics included in the CCSP Common Body of Knowledge (CBK) ensure its relevancy across all disciplines in the field of cloud security. Successful candidates are competent in the following 6 domains: Cloud Concepts, Architecture and Design, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Cloud Security Operations, and Legal, Risk and Compliance.
More information can be found on the certifying agency's website.
Certified Cloud Security Professional (CCSP)
The following DOD Civilian Occupations provide training and/or experience that contributes to attaining this credential:
The following Federal Occupations provide training and/or experience that contribute to attaining this credential:
| Federal Occupation | Related As | |
|---|---|---|
| 2210 Information Technology Management Series |  Other |
MINIMUM REQUIREMENTS
Eligibility Requirements (View Details)
- Credential Prerequisite
- Experience: 5 years
- Education
- Training
- Membership
- Other
- Fee
Note: This credential may have multiple options for becoming eligible. Listed are the minimum requirements based on the minimum degree required. To view other options, see the Eligibility tab.
Exam Requirements (View Details)
- Exam
- Written Exam
- Oral Exam
- Practical Exam
- Performance Assessment
RECERTIFICATION SUMMARY
Renewal Period: 3 years
AGENCY CONTACT INFORMATION
International Information Systems Security Certification Consortium, Inc. (ISC 2)
311 Park Place Blvd
Suite 400
Clearwater, FL 33759
Phone: (866) 331-4722
Fax: (703) 356-7977
Email: membersupport@isc2.org
Experience REQUIREMENTS
Candidate must have a minimum of five (5) years of cumulative paid full-time information technology experience, of which three (3) years must be in information security and one (1) year in one of the six (6) domains of the CCSP examination.
Option 2:Earning (ISC)²’s CISSP credential can be substituted for the entire CCSP experience requirement.
Other REQUIREMENTS
The Certified Cloud Security Professional (CCSP) credential has the following other requirements:
- Candidates must subscribe to the (ISC)2 Code of Ethics.
Written Exam
-
Cloud Concepts, Architecture and Design (17%)
- Understand Cloud Computing Concepts
- Describe Cloud Reference Architecture
- Understand Security Concepts Relevant to Cloud Computing
- Understand Design Principles of Secure Cloud Computing
- Evaluate Cloud Service Providers
-
Cloud Data Security (19%)
- Describe Cloud Data Concepts
- Design and Implement Cloud Data Storage Architectures
- Design and Apply Data Security Technologies and Strategies
- Implement Data Discovery
- Implement Data Classification
- Design and Implement Information Rights Management (IRM)
- Plan and Implement Data Retention, Deletion and Archiving Policies
- Design and Implement Auditability, Traceability and Accountability of Data Events
-
Cloud Platform & Infrastructure Security (17%)
- Comprehend Cloud Infrastructure Components
- Design a Secure Data Center
- Analyze Risks Associated with Cloud Infrastructure
- Design and Plan Security Controls
- Plan Disaster Recovery (DR) and Business Continuity (BC)
-
Cloud Application Security (17%)
- Advocate Training and Awareness for Application Security
- Describe the Secure Software Development Life Cycle (SDLC) Process
- Apply the Secure Software Development Life Cycle (SDLC)
- Apply Cloud Software Assurance and Validation
- Use Verified Secure Software
- Comprehend the Specifics of Cloud Application Architecture
- Design Appropriate Identity and Access Management (IAM) Solutions
-
Cloud Security Operations (17%)
- Implement and Build Physical and Logical Infrastructure for Cloud Environment
- Operate Physical and Logical Infrastructure for Cloud Environment
- Manage Physical and Logical Infrastructure for Cloud Environment
- Implement Operational Controls and Standards (e.g., Information Technology Infrastructure Library (ITIL), International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 20000-1)
- Support Digital Forensics
- Manage Communication with Relevant Parties
- Manage Security Operations
-
Legal, Risk and Compliance (13%)
- Articulate Legal Requirements and Unique Risks within the Cloud Environment
- Understand Privacy Issues
- Understand Audit Process, Methodologies, and Required Adaptations for a Cloud Environment
- Understand Implications of Cloud to Enterprise Risk Management
- Understand Outsourcing and Cloud Contract Design
Exam Preparation Resources
There are a number of resources available to help you prepare for the Certified Cloud Security Professional (CCSP) examination:
- Best Sources
- General References
Testing Information
Testing for this credential is handled by Pearson VUE. The test centers are located in the U.S. They also have some test centers on military bases.
To find out more, use the following links on the Pearson VUE website:
For more information on the International Information Systems Security Certification Consortium, Inc. (ISC 2) testing process, visit the agency website.
RECERTIFICATION
Certified Cloud Security Professional (CCSP)
Renewal Period: 3 years
MOST
SOME