ISC2 / Professional / CCSP
Cloud Security Professional
Apply security across cloud service models, data lifecycles, software delivery and provider contracts.
Aligned to the outline effective 1 August 2026, including AI/ML. Experience and endorsement requirements are separate from passing the exam. Shared security foundations precede four cloud-specific chapters.
THE REVISION PATH
Your topics, in order.
Read. Recall. Explain the alternative.
Secure Architecture and Network Defences
Reduce exposure; separate trust; inspect the right layer.
Security Principles and Controls
Protect the right property with the right kind of control.
Cryptography, Certificates and Keys
Encrypt for secrecy; sign for origin; hash for comparison.
Data Lifecycle, Privacy and Recovery
Know the owner, keep only what you need, test restoration.
Hardening and Vulnerability Management
Inventory, prioritize, fix, verify.
Identity, Authentication and Privileged Access
Who are you, what may you do, and for how long?
Threats, Attacks and Indicators
Actor explains intent; evidence identifies the technique.
Incident Response and Evidence
Contain harm while preserving what explains it.
Monitoring, Automation and Investigation
Correlate signals; constrain automated actions.
Governance, Risk and Assurance
Business owns risk; controls reduce it; evidence checks it.
Cloud Responsibilities and Provider Assurance
Outsource the operation; retain the accountable decision.
Cloud Data, Applications and AI Boundaries
Follow the data into every copy, model and tool.
Cloud Operations, Forensics and Service Management
Preserve evidence before an ephemeral system disappears.
Cloud Contracts, Privacy and Audit Evidence
Scope the promise, verify the evidence, plan the exit.
How this guide is organised
Original revision notes arranged around practical decisions. The linked official objectives define the mapped scope; primary documentation supports the explanations. Read each topic, answer without looking, then explain why another option would fail.
- Official exam guide ↗ Scope authority
- ISC2 official training ↗ Vendor learning reference
Revision material supports preparation; it does not guarantee every possible exam question. Check the exam version and official objectives before booking.