Candidates must have at least five years of cumulative work experience in the field of information technology, of which three years in the field of information security and one year in one or more of the six CCSP CBK® (Common Body of Knowledge) areas. One year of experience in one or more of the six areas of the CCSP CBK may be substituted for the CSA CCSK certificate. (ISC)² CISSP certification may be substituted for the full CCSP experience requirement

Candidates can achieve this certification by passing the following ccsp exam(s).

Exam Number: Certified Cloud Security Professional

The certification exam can be registered and attempted within 3 months of course/module completion at Pearson VUE's Website

The Bff Academy course material for Certified Cloud Security Professional certification provided.

• Cloud Concepts, Architecture and Design
• Cloud Data Security
• Cloud Platform & Infrastructure Security
• Cloud Application Security
• Cloud Security Operations
• Legal, Risk and Compliance

• Cloud Architect
• Cloud Engineer
• Cloud Consultant
• Cloud Administrator
• Cloud Security Analyst
• Cloud Specialist
• Auditor of Cloud Computing Services
• Professional Cloud Developer

• Understand Cloud Computing Concepts
• Describe Cloud Reference Architecture
• Understand Security Concepts Relevant to Cloud Computing
• Understand Design Principles of Secure Cloud Computing
• Evaluate Cloud Service Providers
• Describe Cloud Data Concepts
• Design and Implement Cloud Data Storage Architectures
• Design and Apply Data Security Technologies and Strategies
• Implement Data Discovery
• Implement Data Classification
• Design and Implement Information Rights Management (IRM)
• Plan and Implement Data Retention, Deletion and Archiving Policies
• Design and Implement Auditability, Traceability and Accountability of Data Events
• Comprehend Cloud Infrastructure Components
• Design a Secure Data Centre
• Analyse Risks Associated with Cloud Infrastructure
• Design and Plan Security Controls
• Plan Disaster Recovery (DR) and Business Continuity (BC)
• Advocate Training and Awareness for Application Security
• Describe the Secure Software Development Life Cycle (SDLC) Process
• Apply the Secure Software Development Life Cycle (SDLC)
• Apply Cloud Software Assurance and Validation
• Use Verified Secure Software
• Comprehend the Specifics of Cloud Application Architecture
• Design Appropriate Identity and Access Management (IAM) Solutions
• Implement and Build Physical and Logical Infrastructure for Cloud Environment
• Operate Physical and Logical Infrastructure for Cloud Environment
• Manage Physical and Logical Infrastructure for Cloud Environment
• Implement Operational Controls and Standards (e.g. ITIL®, ISO/IEC 20000-1
• Support Digital Forensics
• Manage Communication with Relevant Parties
• Manage Security Operations
• Articulate Legal Requirements and Unique Risks within the Cloud Environment
• Understand Privacy Issues
• Understand Audit Process, Methodologies, and Required Adaptations for a Cloud Environment
• Understand Implications of Cloud to Enterprise Risk Management
• Understand Outsourcing and Cloud Contract Design