CCSP : BUNDLE PACK LEARNING TOOLS INCLUDED

About CCSP
(ISC)² and the Cloud Security Alliance (CSA) developed the Certified Cloud Security Professional (CCSP)
credential to ensure that cloud security professionals have the required knowledge, skills, and abilities in
cloud security design, implementation, architecture, operations, controls, and compliance with regulatory
frameworks. A CCSP applies information security expertise to a cloud computing environment and
demonstrates competence in cloud security architecture, design, operations, and service orchestration. This
professional competence is measured against a globally recognized body of knowledge. The CCSP is a standalone
credential that complements and builds upon existing credentials and educational programs, including
(ISC)²’s Certified Information Systems Security Professional (CISSP) and CSA’s Certificate of Cloud Security Knowledge (CCSK).

The topics included in the CCSP Common Body of Knowledge (CBK) ensure its relevancy across all disciplines
in the field of cloud security. Successful candidates are competent in the following 6 domains:

• Architectural Concepts & Design Requirements
• Cloud Data Security
• Cloud Platform & Infrastructure Security
• Cloud Application Security
• Operations
• Legal & Compliance

Experience Requirements
Candidates must have a minimum of 5 years cumulative paid full-time work experience in information
technology, of which 3 years must be in information security and 1 year in 1 or more of the 6 domains of
the CCSP CBK. Earning CSA’s CCSK certificate can be substituted for 1 year of experience in 1 or more of
the 6 domains of the CCSP CBK. Earning (ISC)²’s CISSP credential can be substituted for the entire CCSP experience requirement.
A candidate that doesn’t have the required experience to become a CCSP may become an Associate of (ISC)²
by successfully passing the CCSP examination. The Associate of (ISC)² will then have 6 years to earn the 5
years required experience.

Accreditation
CCSP under ANSI review for compliance with the stringent requirements of ANSI/ISO/IEC Standard 17024.

Job Task Analysis (JTA)
(ISC)² has an obligation to its membership to maintain the relevancy of the CCSP. Conducted at regular
intervals, the Job Task Analysis (JTA) is a methodical and critical process of determining the tasks that are
performed by security professionals who are engaged in the profession defined by the CCSP. The results of
the JTA are used to update the examination. This process ensures that candidates are tested on the topic
areas relevant to the roles and responsibilities of today’s practicing information security professionals focusing
on cloud technologies.