#1

Cloud security is the top technical skill hiring managers prioritise, cited by 29%. ISC2 Cybersecurity Workforce Study 2025.

ISC2 Certified Cloud Security Professional (CCSP) certification

Cloud Skills Top the Hiring List.

When hiring managers name the technical skill they need most, cloud security comes first. The ISC2 CCSP credential proves you can design, run and govern secure cloud on any provider.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

ISC2 CCSP

Course

5 days

Course fee

RM9,500

Exam fee

Included

Next intake

14 Dec 2026

Version note: The CCSP exam moved to a new outline on 1 Aug 2026, and exams now run in set windows through the year. Pick an intake that lines up with the window you want to sit.

Quick answer

What is CCSP?

The Certified Cloud Security Professional (CCSP) is ISC2’s vendor-neutral certification for cloud security. It proves you can secure cloud architecture, data, platforms, applications and operations, and handle the legal and compliance side. The exam is adaptive, 100 to 150 items in three hours, and you need five years of IT experience to be certified.

Exam facts verified against isc2.org on 23 Oct 2026

FOR

Security architects, engineers and consultants working in cloud

ROLES

Cloud security architect, cloud security engineer, security consultant

SKIP IF

You want AWS-specific depth. Look at AWS Security Specialty

01

The Credential

What you study, practise and sit to earn it.

Pass the CCSP exam, show five years of IT experience including three in cybersecurity, and get endorsed. An active CISSP covers the full experience requirement.

COURSE

5 days, 6 domains

COURSEWARE

ISC2 Official Training

EXAM

CAT, 3 hrs

CREDENTIAL

ISC2 CCSP

Awarded by

ISC2

Exam outline

Effective 1 Aug 2026

Experience

5 yrs IT, 3 in cybersecurity, 1 in a CCSP domain

Substitutions

Active CISSP covers it all; CCSK or a degree, one year

No experience yet?

Pass and become an Associate of ISC2

Upkeep

90 CPE per 3 years, US$135 a year

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Secure cloud across any provider

→

CCSP

Vendor-neutral cloud architecture, data, operations and compliance

Go deep on securing AWS

→

AWS Security Specialty

Hands-on AWS identity, data and incident response

Lead security across every domain

→

CISSP

ISC2’s senior, broad security credential

Own IT risk and controls

→

ISACA CRISC

Risk management linked to business goals

Experience needed to certify. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with SSCP or ISC2 CC.

03

What the Exam Covers

Six domains from ISC2’s August 2026 CCSP exam outline. Bars to scale.

6 domains, 100 to 150 itemsLargest: Cloud Data Security, 20%

Cloud Data Security 20%
Cloud Concepts, Architecture and Design 17%
Cloud Platform and Infrastructure Security 17%
Cloud Security Operations 17%
Cloud Application Security 16%
Legal, Risk and Compliance 13%

Source: ISC2 CCSP Certification Exam Outline, effective 1 Aug 2026.

04

What the Course Covers

Six domains with ISC2 Official Training courseware.

Five days of ISC2 Official Training, delivered by an ISC2 Authorized Instructor. Each day maps to the exam outline, with practice questions built in.

Domain 1

Concepts, Architecture and Design

  • Cloud service categories and shared responsibility
  • Secure cloud architecture and design
  • Evaluating cloud service providers

Domain 2

Cloud Data Security

  • Data lifecycle, classification and discovery
  • Encryption, keys, secrets and certificates
  • Information rights management and data events

Domain 3

Platform and Infrastructure

  • Physical and virtual infrastructure
  • Risks to cloud platforms
  • Identity, authentication and authorisation in cloud

Domain 4

Cloud Application Security

  • OWASP, API and LLM application risks
  • Threat modelling and secure coding
  • Testing, WAF, API gateways and containers

Domain 5

Cloud Security Operations

  • Secure network and OS configuration
  • Monitoring, incident handling and forensics
  • Operational controls and standards

Domain 6

Legal, Risk and Compliance

  • Laws, privacy and jurisdiction
  • Audit in the cloud
  • Risk management and outsourcing contracts

ISC2

Official Training courseware and integrated practice questions, taught by an ISC2 Authorized Instructor.

05

Why Now

What hiring managers want, where the gaps are, and why train with us.

#1

technical skill hiring managers prioritise is cloud security, cited by 29%

ISC2 Cybersecurity Workforce Study 2025

36%

of security teams name cloud security as a pressing skills need, second only to AI

ISC2 Cybersecurity Workforce Study 2025

24%

report misconfigured systems as a result of skills shortages

ISC2 Cybersecurity Workforce Study 2025

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Much of that infrastructure now runs in the cloud.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

ISC2 Official Training Preferred Partner

Official ISC2 courseware and Authorized Instructors

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Five-day courseIncluded

CCSP exam voucherIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM9,500

Dates

Where

Fee

Mon 14 to Fri 18 Dec 2026

Kuala Lumpur or online

RM9,500 incl. exam

Mon 4 to Fri 8 Jan 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 15 to Fri 19 Feb 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 22 to Fri 26 Mar 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 26 to Fri 30 Apr 2027

Kuala Lumpur or online

RM9,500 incl. exam

Exam windows: ISC2 runs CCSP exams from 4 Jan to 2 Feb, through April, from 11 Jul to 9 Aug, and from 8 Oct to 6 Nov. Plan your exam date with your advisor when you book.

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Certified Cloud Security Professional (CCSP)

Format

Computerised Adaptive Testing (CAT)

Items

100 to 150, multiple choice and advanced item types

Duration

3 hours

Passing score

700 out of 1,000

Delivery

Pearson VUE test centre

Exam windows

4 Jan to 2 Feb, April, 11 Jul to 9 Aug, 8 Oct to 6 Nov

Exam fee

Included in the course fee

KEEP IT ACTIVE

Earn 90 CPE credits

Earn 90 continuing professional education credits over each three-year cycle, about 30 a year.

ANNUAL FEE

US$135 a year

ISC2 members pay one annual maintenance fee of US$135, however many ISC2 certifications they hold.

FAQ

Questions People Ask

What is CCSP?

The Certified Cloud Security Professional (CCSP) is ISC2’s vendor-neutral cloud security certification. It covers six domains, from cloud architecture and data security to operations and legal, risk and compliance.

ISC2 updated the CCSP exam outline on 1 Aug 2026, with new content such as large language model application risks and AI data and model security. The exam now uses adaptive testing and runs in set windows during the year.

At Trainocate Malaysia the five-day CCSP course is RM9,500 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

ISC2 runs CCSP exams in four windows: 4 Jan to 2 Feb, through April, 11 Jul to 9 Aug and 8 Oct to 6 Nov. Our advisors help you choose an intake that lines up with a window.

Five years of full-time IT experience, including three in cybersecurity and one in a CCSP domain. A relevant degree or the CSA CCSK can count for one year, and an active CISSP covers the whole requirement. Without the experience you can pass and become an Associate of ISC2.

CISSP is broad and covers all of security leadership. CCSP goes deep on cloud. Many professionals earn CISSP first, which also satisfies the CCSP experience requirement.

Earn 90 CPE credits every three years and pay the US$135 annual maintenance fee.

Secure the Cloud, on Any Provider

Pick an intake. An advisor confirms fees, your exam window, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 14 to 18 Dec 2026
  • RM9,500, exam included

Sources

  1. ISC2: CCSP certification
  2. ISC2: CCSP exam outline, effective 1 Aug 2026
  3. ISC2: Member policies (CPE requirements)
  4. ISC2: Annual maintenance fees
  5. ISC2: 2025 Cybersecurity Workforce Study
  6. Trainocate: CCSP course page
  7. NACSA: Cyber Security Act 2024 (Act 854)
  8. MAICSA: Act 854 regulations summary