CCSP for cloud security practitioners: who qualifies, the exam and the cost

By Alexander Shick · Updated November 5, 2026

What CCSP says about you, and who it is for

ISC2 says CCSP shows you have the “advanced technical skills and knowledge to design, manage and secure data, applications and infrastructure in the cloud.” Its six domains run from cloud architecture and data security to cloud operations and legal, risk and compliance. ISC2 names cloud architects, engineers, consultants, administrators, security analysts and auditors of cloud services as the people who earn it. No domain is tied to one cloud provider, so it tests cloud security judgment rather than one provider's console.

Five years, three in security, or a CISSP

The exam is open to anyone; the credential is not. ISC2 wants five years of cumulative, full-time IT work. Three of those years must be in cybersecurity, and one must fall in one or more of the six CCSP domains. Part-time work and internships count under the same rules ISC2 uses for CISSP.

Two things can take a year off: a bachelor's or master's degree in computer science, IT or a related field, or the Cloud Security Alliance's CCSK certificate. Only one year in total can be waived. An active CISSP is different: it replaces the entire CCSP experience requirement, which makes CCSP a natural second ISC2 credential.

If you pass short of the experience, you become an Associate of ISC2 and have six years to earn the five. Associates pay a $50 annual fee rather than $135. Passing is not the last step: within nine months of the exam you submit ISC2's certification application. First-time ISC2 candidates also need an endorser (an ISC2-certified professional, or ISC2 itself with proof of employment) and then pay the first annual fee; if you already hold an ISC2 certification other than CC alone, such as CISSP, you need no endorser and no extra fee.

The August 2026 CCSP outline and its six domains

ISC2 moved CCSP to a new outline on August 1, 2026. The exam is adaptive, with 100 to 150 multiple-choice and advanced items in 3 hours, and you pass at 700 out of 1,000. It is offered in English, Chinese, Japanese and German, in person at Pearson test centers; ISC2 notes that Chinese-language sittings run only in set windows.

ISC2 also publishes a note on where AI concepts appear across the domains. If your background is engineering on one platform, plan extra time for legal, risk and compliance: it is the domain least like day-to-day cloud work.

Ways to prepare for CCSP

ISC2 sells three official routes: a self-paced online course, a live online class taught by an ISC2 authorized instructor on full-time or part-time schedules, and in-person classroom training. ISC2 members get lower prices on the self-paced course, and ISC2 offers an education guarantee: if you fail on the first attempt, you can take the same training again at no cost within a year of finishing it.

The self-paced course suits people who already work in cloud security and need structure across all six domains. A live class suits people who want a fixed schedule or whose employer pays. Commercial bootcamps, such as Learning Tree's five-day course, add the exam voucher and coaching but cost the most. ISC2's free CCSP Ultimate Guide is a useful starting checklist, not a course.

Published CCSP training prices

Totals add the $599 exam fee unless the provider says the voucher is included.

Count the voucher before comparing. ISC2's live class plus a separate voucher comes to $3,249, $1,046 less than Learning Tree's $4,295 with the voucher included. Costs people miss: a failed attempt means paying $599 again unless you bought the $798 two-attempt option (both sittings within 180 days of purchase); ISC2 charges $50 to reschedule and $100 to cancel; and the $135 annual fee starts once you are certified.

Questions that separate one CCSP course from another

• Does it teach the August 1, 2026 outline? Learning Tree's FAQ describes the weight changes but lists cloud security operations at 16%, while ISC2's outline gives that domain 17%; ask which outline the course materials follow.
• Is the voucher included, and when does it expire? Learning Tree includes one; ISC2's course prices do not. ISC2 exam purchases must be used within 365 days.
• How long does access last? ISC2's live class gives 180 days of materials from the first session; ask how long self-paced access runs before you buy, since ISC2 sells 90-day and 180-day versions.
• What happens if you fail? ISC2's education guarantee covers repeating its own training; ask other providers whether they offer a free retake of the class or the exam.

Keeping CCSP active

ISC2's certification maintenance handbook sets CCSP at 90 continuing professional education (CPE) credits per three-year cycle, at least 60 of them Group A (tied to the CCSP domains), with a suggested 30 a year. You also pay the $135 annual maintenance fee on your certification anniversary. One fee covers all your ISC2 certifications, so a CISSP holder who adds CCSP pays $135 a year, not double.

For a cloud or security team

Because the single $135 fee covers every ISC2 credential a person holds, CCSP adds no yearly fee for staff who already hold CISSP, and the CISSP waiver means they need no further experience; they still submit ISC2's certification application after passing, with no endorser needed. For staff without CISSP, check each person's IT and security years before paying for a class: those who pass short of five years become Associates, not CCSPs.

CCSP questions

How much does the CCSP exam cost?

$599 in the Americas as of November 2026, or $798 with a second attempt included.

Do I need CISSP before CCSP?

No. But an active CISSP replaces the whole five-year experience requirement, so with CISSP you need no further experience. You still submit ISC2's certification application after passing, with no endorser needed.

Can I take CCSP without five years of experience?

Yes. You become an Associate of ISC2 when you pass and have six years to earn the experience.

Does the CCSK certificate count?

Yes, for one year of the five. Only one year in total can be waived by a degree or the CCSK.

Next step

Send your background, your target date and who is paying, and we will suggest a CCSP route.

Ask for help choosing CCSP training