Short answer
- What it is: Certified Cloud Security Professional, issued by ISC2, covering cloud security architecture, data, platforms, applications, operations and compliance (ISC2).
- Requirement: five years of full-time IT experience, including three in cybersecurity and one in a CCSP domain. An active CISSP replaces the entire requirement (ISC2).
- Exam fee: $599 in the US (ISC2).
- Annual Maintenance Fee: $135, and one AMF covers every ISC2 certification you hold (ISC2).
- Three-year minimum: $1,004 on its own, $599 if you already pay the AMF for a CISSP.
The CCSP is ISC2’s cloud security certification and the natural second step for many CISSP holders. This guide covers what it tests, the requirements, every fee, the 2025 and 2026 exam changes, and how it compares with the CISSP. Every fact links to ISC2. We checked them on September 22, 2026.
What the CCSP covers
ISC2 lists six domains (ISC2):
- Cloud Concepts, Architecture and Design
- Cloud Data Security
- Cloud Platform & Infrastructure Security
- Cloud Application Security
- Cloud Security Operations
- Legal, Risk and Compliance
ISC2 names cloud architects, engineers, consultants, administrators and cloud security analysts as the typical audience. The certification is vendor-neutral: it isn’t tied to AWS, Azure or Google Cloud, which is the main difference from the cloud providers’ own security certifications.
Requirements
ISC2’s wording: “Candidates must have a minimum of five years cumulative, full-time experience in Information Technology (IT). Three years must be in cybersecurity, and one year must be in one or more of the six domains of the current CCSP Exam Outline” (ISC2).
Ways to reduce it:
- An active CISSP “can be substituted for the entire CCSP experience requirement.”
- A degree in computer science or IT, or the Cloud Security Alliance’s CCSK certificate, can replace one year. Only one year can be waived in total.
- Part-time work of 20 to 34 hours a week counts pro rata; paid or unpaid internships count with documentation.
- Without the experience, you can pass the exam and become an Associate of ISC2, with six years to earn the required experience.
The exam
- Computerized adaptive testing (CAT) since October 1, 2025, with a maximum of 150 items and up to three hours (ISC2 CAT, ISC2 announcement).
- A revised exam outline has applied since August 1, 2026 (ISC2). Study material written before mid-2026 may follow the old outline.
- Taken at Pearson VUE test centers.
What the CCSP costs
| Fee | Amount | When |
|---|---|---|
| Exam (US) | $599 | When you book |
| Exam (EMEA euro price / UK) | €575.04 / £485.19 | When you book |
| Exam Peace of Mind (second attempt within 180 days) | +$199 | Bought with the exam |
| Annual Maintenance Fee | $135, shared across all ISC2 certifications | At certification, then yearly |
| Associate of ISC2 AMF | $50 | If you pass without the experience |
| Rescheduling / cancelling | $50 / $100 | If you change your appointment |
Sources: exam pricing, Peace of Mind, AMF overview.
Three-year totals
| Situation | Calculation | 3-year total |
|---|---|---|
| CCSP as your first ISC2 certification | $599 + 3 × $135 AMF | $1,004 |
| You already hold the CISSP | $599 (AMF already paid for the CISSP) | $599 |
| Associate of ISC2 (no experience yet) | $599 + 3 × $50 | $749 |
| Fail once, Peace of Mind bought | $599 + $199 + 3 × $135 | $1,203 |
ISC2 bills the first AMF when your certification is approved and then on each anniversary, so three AMFs fall within the first 36 months (ISC2 member policies). The Peace of Mind add-on pays off if your risk of failing is higher than about one in three ($199 ÷ $599).
Keeping the CCSP
You need 90 CPE credits per three-year cycle, at least 60 of them in Group A. ISC2 suggests 30 a year, but only the three-year total is required (ISC2 member policies).
If you fall behind on CPEs or the AMF, ISC2 gives a 90-day grace period after your certification expires, then suspends it for up to two years before terminating it (same policy).
CCSP vs. CISSP
| CCSP | CISSP | |
|---|---|---|
| Focus | Cloud security, six domains | Broad security, eight domains |
| Experience | 5 years IT, 3 in cybersecurity, 1 in a CCSP domain | 5 years in at least two of eight domains |
| Shortcut | active CISSP waives all experience | degree or approved credential waives one year |
| Exam fee (US) | $599 | $749 |
| AMF | $135 (shared) | $135 (shared) |
| CPE per 3 years | 90 | 120 |
| 3-year minimum | $1,004, or $599 with a CISSP | $1,154 |
Full CISSP breakdown: CISSP certification cost. All security certifications side by side: Certification Cost Index.
Which first? If your work is mostly in the cloud and you don’t have the CISSP’s broader experience yet, the CCSP stands on its own. If you plan to get both, doing the CISSP first makes the CCSP cheaper in two ways: no separate experience check, and no second AMF.
Frequently asked questions
What is the CCSP?
Certified Cloud Security Professional, a vendor-neutral cloud security certification from ISC2.
How much does the CCSP cost?
$599 for the exam in the US, plus a $135 Annual Maintenance Fee. Over three years that’s $1,004, or $599 if you already hold the CISSP and pay its AMF.
Do I need the CISSP for the CCSP?
No. But an active CISSP replaces the whole experience requirement for the CCSP.
How long is the CCSP exam?
Up to three hours, with a maximum of 150 items, delivered as an adaptive test since October 1, 2025.
Can I take the CCSP without experience?
Yes. You become an Associate of ISC2 and have six years to earn the required experience.
How we checked these facts. Every fact comes from ISC2’s own pages, linked where it appears, checked on September 22, 2026. ISC2 changes prices and exam formats from time to time; confirm in your ISC2 account before paying. Certificate Quest is not affiliated with ISC2 or the Cloud Security Alliance and earns nothing from links on this page.