EVIDENCE · NOT SCORES
SIGN IN
← ALL CERTIFICATIONS

ISC2

Certified Cloud Security Professional

CERTIFIED CLOUD SECURITY PROFESSIONALEXAM CCSPBLUEPRINT CCSP-AUGUST-2026

BUILD MY CERTIFICATION PATH

EXAM BLUEPRINT

The published domains and objectives for CCSP. Your missions come from these objectives, and your progress is recorded against them.

  • 17%

    1

    Cloud Concepts, Architecture and Design

    • 1.1Understand cloud computing concepts
    • 1.2Describe cloud reference architecture
    • 1.3Understand security concepts relevant to cloud computing
    • 1.4Understand design principles of secure cloud computing
    • 1.5Evaluate Cloud Service Providers (CSP)
    • 1.6Comprehend Artificial Intelligence (AI)/Machine Learning (ML)

  • 20%

    2

    Cloud Data Security

    • 2.1Describe cloud data concepts
    • 2.2Design and implement cloud data storage architectures
    • 2.3Design and apply data security technologies and strategies
    • 2.4Implement data discovery
    • 2.5Plan and implement data classification
    • 2.6Design and implement Information Rights Management (IRM)
    • 2.7Plan and implement data retention, deletion, and archiving policies
    • 2.8Design and implement auditability, traceability, and accountability of data events
    • 2.9Comprehend data protection of Artificial Intelligence (AI) and Machine Learning (ML) data

  • 17%

    3

    Cloud Platform & Infrastructure Security

    • 3.1Comprehend cloud infrastructure and platform components
    • 3.2Design a secure data center
    • 3.3Analyze risks associated with cloud infrastructure and platforms
    • 3.4Plan and implementation of security controls
    • 3.5Plan business continuity (BC) and disaster recovery (DR)

  • 16%

    4

    Cloud Application Security

    • 4.1Advocate training and awareness for application security
    • 4.2Describe the Secure Software Development Life Cycle (SDLC) process
    • 4.3Apply the Secure Software Development Life Cycle (SDLC)
    • 4.4Apply cloud software assurance and validation
    • 4.5Use verified secure software
    • 4.6Comprehend and apply the specifics of cloud application architecture
    • 4.7Design appropriate Identity and Access Management (IAM) solutions

  • 17%

    5

    Cloud Security Operations

    • 5.1Build and implement physical and logical infrastructure for cloud environment
    • 5.2Operate and maintain physical and logical infrastructure for cloud environment
    • 5.3Implement operational controls and standards
    • 5.4Support digital forensics
    • 5.5Manage communication with relevant parties
    • 5.6Manage security operations

  • 13%

    6

    Legal, Risk and Compliance

    • 6.1Articulate legal requirements and unique risks within the cloud environment
    • 6.2Understand privacy issues
    • 6.3Understand audit process, methodologies, and required adaptations for a cloud environment
    • 6.4Understand implications of cloud to enterprise risk management
    • 6.5Understand outsourcing and cloud contract design