← CCSP overviewCloud Security Professional / STUDY TOOLS
Exam coverage map
Aligned to the outline effective 1 August 2026, including AI/ML. Experience and endorsement requirements are separate from passing the exam. Shared security foundations precede four cloud-specific chapters.
Published objectives
| Objective |
Revision topic |
| 1 · Cloud design and provider evaluation |
01 Secure Architecture and Network Defences, 02 Security Principles and Controls, 11 Cloud Responsibilities and Provider Assurance |
| 2 · Cloud data and AI data protection |
03 Cryptography, Certificates and Keys, 04 Data Lifecycle, Privacy and Recovery, 12 Cloud Data, Applications and AI Boundaries |
| 3 · Infrastructure and recovery |
01 Secure Architecture and Network Defences, 04 Data Lifecycle, Privacy and Recovery, 05 Hardening and Vulnerability Management, 11 Cloud Responsibilities and Provider Assurance |
| 4 · Application and identity security |
06 Identity, Authentication and Privileged Access, 07 Threats, Attacks and Indicators, 12 Cloud Data, Applications and AI Boundaries |
| 5 · Cloud operations and forensics |
08 Incident Response and Evidence, 09 Monitoring, Automation and Investigation, 10 Governance, Risk and Assurance, 13 Cloud Operations, Forensics and Service Management |
| 6 · Legal, risk and supplier contracts |
10 Governance, Risk and Assurance, 14 Cloud Contracts, Privacy and Audit Evidence |