SaveMyCert
Log in
5 of 5 free questions left today·for 30 a day
CCSP revision

CCSP study guide — free revision notes

The complete ISC2 Certified Cloud Security Professional (CCSP) study library — 38 lessons mapped to every domain and topic in the official exam guide. Free to read, no account needed.

Lessons
38
across 6 domains
Reading time
14 hrs
817 minutes in total
Exam
150 Qs
180 min · pass 700 / 1000
Price
Free
no account required
Comprehend Artificial Intelligence (AI)/Machine Learning (ML)
CCSP: AI and Machine Learning in Cloud Security, SOAR and AI Regulation24 min

Create a free account to track completed lessons, bookmark topics and see your exam readiness. · Pro lessons unlock with a one-time upgrade.

The CCSP blueprint, domain by domain

ISC2 publishes exactly what the CCSP tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.

Domain 1

Cloud Concepts, Architecture and Design

17%
of the exam

Cloud computing concepts and reference architecture, cloud security concepts, secure cloud design principles, evaluating providers, and AI/ML in the cloud. Official weighting 17%.

6 topics in this domain
  • Understand cloud computing concepts
  • Describe cloud reference architecture
  • Understand security concepts relevant to cloud computing
  • Understand design principles of secure cloud computing
  • Evaluate Cloud Service Providers (CSP)
  • Comprehend Artificial Intelligence (AI)/Machine Learning (ML)
6 lessons · 139 min of reading · 269 practice questionsStart this domain
Domain 2

Cloud Data Security

20%
of the exam

The cloud data life cycle, storage architectures, encryption, obfuscation and DLP, data discovery and classification, IRM, retention and deletion, data-event auditability, and protecting AI/ML data. Official weighting 20%.

9 topics in this domain
  • Describe cloud data concepts
  • Design and implement cloud data storage architectures
  • Design and apply data security technologies and strategies
  • Implement data discovery
  • Plan and implement data classification
  • Design and implement Information Rights Management (IRM)
  • Plan and implement data retention, deletion, and archiving policies
  • Design and implement auditability, traceability, and accountability of data events
  • Comprehend data protection of Artificial Intelligence (AI) and Machine Learning (ML) data
9 lessons · 179 min of reading · 306 practice questionsStart this domain
Domain 3

Cloud Platform & Infrastructure Security

17%
of the exam

Cloud infrastructure components, secure data center design, infrastructure risks, security controls, and business continuity and disaster recovery. Official weighting 17%.

5 topics in this domain
  • Comprehend cloud infrastructure and platform components
  • Design a secure data center
  • Analyze risks associated with cloud infrastructure and platforms
  • Plan and implementation of security controls
  • Plan business continuity (BC) and disaster recovery (DR)
5 lessons · 112 min of reading · 252 practice questionsStart this domain
Domain 4

Cloud Application Security

16%
of the exam

Application security awareness, the secure SDLC, cloud software assurance and validation, verified secure software, cloud application architecture, and IAM solutions. Official weighting 16%.

7 topics in this domain
  • Advocate training and awareness for application security
  • Describe the Secure Software Development Life Cycle (SDLC) process
  • Apply the Secure Software Development Life Cycle (SDLC)
  • Apply cloud software assurance and validation
  • Use verified secure software
  • Comprehend and apply the specifics of cloud application architecture
  • Design appropriate Identity and Access Management (IAM) solutions
7 lessons · 152 min of reading · 245 practice questionsStart this domain
Domain 5

Cloud Security Operations

17%
of the exam

Building, operating and maintaining cloud infrastructure, operational controls and standards, digital forensics, communication with relevant parties, and security operations. Official weighting 17%.

6 topics in this domain
  • Build and implement physical and logical infrastructure for cloud environment
  • Operate and maintain physical and logical infrastructure for cloud environment
  • Implement operational controls and standards
  • Support digital forensics
  • Manage communication with relevant parties
  • Manage security operations
6 lessons · 124 min of reading · 258 practice questionsStart this domain
Domain 6

Legal, Risk and Compliance

13%
of the exam

Legal requirements and cloud-specific risks, privacy, audit in the cloud, enterprise risk management, and outsourcing and contract design. Official weighting 13%.

5 topics in this domain
  • Articulate legal requirements and unique risks within the cloud environment
  • Understand privacy issues
  • Understand audit process, methodologies, and required adaptations for a cloud environment
  • Understand implications of cloud to enterprise risk management
  • Understand outsourcing and cloud contract design
5 lessons · 111 min of reading · 200 practice questionsStart this domain

How to revise for the CCSP

Reading every note front to back is the slowest way to pass. The exam is weighted, so your revision should be too — the blueprint above tells you exactly where the marks are.

Read in weight order, not page order

Cloud Data Security carries the most marks on the CCSP, so it earns the most of your attention. Work down the blueprint from the heaviest domain to the lightest rather than starting at domain 1 and grinding forward.

First pass for coverage, second pass for recall

Read each lesson once without stopping to memorise — you are building a map, not a memory. On the second pass, read only the "what's tested" and key-takeaway blocks. If a takeaway surprises you, that lesson goes back on the pile.

Turn takeaways into questions

Cover a lesson's key takeaways and try to say them out loud from the heading alone. Recall you can produce under your own steam is the only recall that survives a timed exam; recognition on a re-read is not the same thing.

Stop reading when practice, not the page count, says so

Finishing the notes is not the goal — scoring is. Move to CCSP practice questions early, then come back to the exact lessons your wrong answers point at. That loop is worth far more than a third read-through.

Beyond the CCSP notes

CCSP cheat sheetEvery key takeaway from these notes on one page, grouped by domain. For the week of the exam.CCSP flashcardsThe same key facts one at a time, answer hidden until you commit — recall practice rather than re-reading.CCSP practice questions1530 exam-realistic questions with an explanation on every option. Reading is not the same as knowing.CCSP mock exams150 questions in 180 minutes, scored like the real thing. Sit one before you book.CCSP study planWhich domains to take first, how long each one needs, and when to switch from reading to questions.About the CCSPExam facts, who it is for, cost and how it fits alongside the other certifications.

CCSP revision notes: your questions

Yes. All 38 CCSP lessons are readable in full without an account and without payment. Creating a free account adds progress tracking, bookmarks and a readiness score — it does not unlock extra reading.

Source

Exam structure, domain weights and scoring on this page come from the official CCSP exam guide.