CCSP
(ISC)2 Certified Cloud Security Professional
Created per CertMap methodology · Updated 12 May 2026 · About the editorial team →
▾ Jump to …4 sections
Overview
What is CCSP?
The CCSP is considered the leading certification for cloud security architects and professionals, covering all six domains of cloud security, from architecture and design to legal and compliance topics. Since October 2025, the exam uses Computerized Adaptive Testing (CAT), which makes the exam length dynamic and enables statistically sound assessment. The certification requires substantial professional experience and is clearly aimed at experienced professionals – not beginners. An active CISSP certification can replace the entire experience requirement, which represents a sensible upgrade path for CISSP holders. Starting August 2026, a new Exam Outline with explicit AI security integration across all domains will be introduced.
Quick facts
Key details
Cost, prerequisites, exam & renewal
Cost over 5 years
Prerequisites
5 years IT experience, including 3 years in IT security and 1 year in cloud security. Active CISSP replaces all experience requirements.
Exam format
CAT-based, 100–150 questions, 3 hours, proctored via Pearson VUE. Passing score: 700/1000.
Renewal & maintenance
Valid for 3 years. 30 CPE credits/year + annual AMF (125 USD, shared across all ISC2 certs).
Classification
CertMap score and matching roles
Rating
Matching NICE roles
Mapping from NIST NICE Framework SP 800-181, status 2025. NIST source ↗
More certifications
More certifications
From ISC2
CCISC2 Certified in CybersecurityCISSP(ISC)2 Certified Information Systems Security ProfessionalHCISPPHealthCare Information Security and Privacy PractitionerISSAPInformation Systems Security Architecture ProfessionalISSEPInformation Systems Security Engineering ProfessionalISSMPInformation Systems Security Management ProfessionalSSCP(ISC)2 Systems Security Certified PractitionerIn Cloud Security
PECB Lead Cloud Security ManagerPECBThis page follows CertMap methodology: editorial content is curated by hand. Score, costs and NICE mapping are aggregated from official provider documents. Score methodology → · TCO methodology →
Transparency: CertMap is operated by Daniel Thomas Heessel, who is also managing director of Threat‑Informed, a company specialising in Threat‑Informed Defense. He additionally offers consulting services on CertMap. CertMap currently receives no commissions from certification providers, no affiliate links, no sponsored placements. Podcast and interview guests are not paid for appearances and receive no affiliate commissions.
From the knowledge base
View all articles →About the CertMap editorial team
CertMap is an independent platform for comparing cybersecurity certifications, built on data-journalism standards that combine editorial curation with mechanical aggregation.
Certification vs. Certificate: What's the Difference?
Personnel certification per ISO/IEC 17024 versus a training certificate. Why the distinction matters.
BSI IT-Grundschutz: Practitioners, Advisors, and the Accreditation Question
What distinguishes Practitioner from Advisor, and where does accreditation sit in the BSI path?
1:1 with the CISO
Need the full picture for your case?
60 minutes of personal strategy instead of weeks of self-research. Vendor-independent, with a written report.