The CCSP shows that an experienced professional can design, run and govern security in cloud environments, whatever the provider. This five-day preparation covers the six domains of the exam outline in force since 1 August 2026, which now includes AI and machine learning topics. It combines teaching, case studies and practice questions in the adaptive format.
The essentials
Publisher : ISC2
Certification : CCSP – Certified Cloud Security Professional
Duration : 5 days (35 h)
Level : Advanced
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Computerized adaptive test (CAT) · 100–150 items · 3 h
Exam voucher: included or optional depending on the package — contact us.
Master cloud concepts, service models and reference architectures.
Protect data across its lifecycle: classification, encryption, rights management.
Secure the platform and infrastructure, including business continuity and recovery.
Build security into cloud application development and API management.
Run secure operations: monitoring, incident handling and investigations.
Handle the legal, contractual, privacy and audit issues specific to cloud.
Assess the risks of AI use in cloud services.
Program
Domain 1 – Cloud concepts, architecture and design
Reference architecture and design principles
Evaluating cloud service providers
AI and machine learning integration
Domain 2 – Cloud data security
Data lifecycle and discovery
Encryption, classification and rights management
Retention, deletion and auditability
Domain 3 – Cloud platform and infrastructure security
Infrastructure components and data centers
Risk analysis and controls
Business continuity and disaster recovery
Domain 4 – Cloud application security
Secure development lifecycle and threat modelling
Application testing and API security
Identity and access management solutions
Domain 5 – Cloud security operations
Building and maintaining infrastructure
Operational controls and the SOC
Digital forensics and stakeholder communication
Domain 6 – Legal, risk and compliance
Legal requirements and privacy
Audit and enterprise risk management
Contracts and supply chain
Prerequisites
ISC2 requires five years of cumulative full-time IT experience, including three in cybersecurity and at least one in one or more CCSP domains.
A computer science degree or the Cloud Security Alliance CCSK can waive one year; an active CISSP waives the whole requirement.
Without that experience you can pass the exam and become an Associate of ISC2, then have six years to gain it.
Target audience
Cloud security architects and engineers
CISOs and information security managers
System administrators and DevOps engineers running cloud workloads
Consultants, auditors and compliance managers
The exam
Since 1 October 2025 the CCSP has used computerized adaptive testing (CAT): difficulty adjusts to your answers and the exam runs from 100 to 150 items within 3 hours. It is offered in English, Chinese, Japanese and German. Once purchased, you have 365 days to schedule and sit the exam, and ISC2 sells an optional retake protection. Passing is followed by an experience validation step before the credential is awarded.
Preparation tips
Answer as a risk adviser: the best option protects the organisation, not just the technology.
Do not neglect the legal and contractual domain, which technical profiles often underestimate.
Practise with questions in English, as the exam is not available in French.
Frequently asked questions (FAQ)
What changed with the August 2026 outline?
ISC2 refreshed the outline on 1 August 2026 while keeping six domains. AI and machine learning topics now appear, notably in architecture design and data security.
Is the CCSP exam available in French?
No. It is offered in English, Chinese, Japanese and German. You can take the course in French, with targeted review of the English terminology.
Does the CCSK help with the CCSP?
Yes, in two ways: its content overlaps part of the outline, and ISC2 accepts it to waive one year of the experience requirement.
How many questions are on the exam?
Between 100 and 150, depending on how the adaptive exam unfolds, within 3 hours.
Is the course available online or in Casablanca?
Both: as a live online class, in person in Casablanca, or on-site at your organization, taught in French or English.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a training partner of ISC2. ISC2 and CCSP are trademarks of ISC2.