CISSP vs CCSP
Both certifications come from ISC2 and use the same adaptive exam format. CISSP covers security across eight broad domains, while CCSP is limited to cloud architecture, data, platform, application, and operations security plus cloud legal and compliance topics.
Side by Side
| CISSP | CCSP | |
|---|---|---|
| Full name | Certified Information Systems Security Professional | Certified Cloud Security Professional |
| Issuer | ISC2 | ISC2 |
| Level | Advanced | Advanced |
| Exam type | Computerized adaptive | Computerized adaptive |
| Questions | 100-150 | 100-150 |
| Duration | 3 hours | 3 hours |
| Passing score | 700 out of 1000 points | 700 out of 1000 points |
| Exam fee | $749 | $599 |
| Prerequisites | Five years of cumulative, full-time work experience in two or more of the eight CISSP domains. A relevant degree or one credential from the ISC2 approved list can waive one year, and only one waiver applies. Candidates without the experience can pass the exam and become an Associate of ISC2, with six years to earn the five years of experience. | Five years of full-time IT experience, including three years in cybersecurity and one year in at least one of the six CCSP domains. A degree or the CSA CCSK can waive one year, and an active CISSP replaces the whole requirement. A passing candidate without the experience can become an Associate of ISC2 for up to six years. |
| Validity | 3 years | 3 years |
| Renewal | 120 CPE credits per three-year cycle (at least 90 Group A, the rest Group A or B) plus a U.S. $135 annual maintenance fee. | 90 CPE credits per three-year cycle (60 Group A, 30 Group A or B) and a U.S. $135 annual maintenance fee. |
| Exam domains | Security and Risk Management; Asset Security; Security Architecture and Engineering; Communication and Network Security; Identity and Access Management (IAM); Security Assessment and Testing; Security Operations; Software Development Security | Cloud Concepts, Architecture and Design; Cloud Data Security; Cloud Platform and Infrastructure Security; Cloud Application Security; Cloud Security Operations; Legal, Risk and Compliance |
Main Differences
- +Scope: CISSP has eight domains covering the whole security program. CCSP has six domains, all specific to cloud environments.
- +Experience: CISSP needs five years in two or more of its eight domains. CCSP needs five years of IT experience, including three in cybersecurity and one in a CCSP domain, and an active CISSP satisfies the whole requirement.
- +Cost: ISC2 lists the CISSP exam at U.S. $749 and the CCSP exam at U.S. $599 for standard registration in the Americas.
- +Renewal: CISSP requires 120 CPE credits per three-year cycle and CCSP requires 90. Both carry the same $135 annual maintenance fee, paid once for all ISC2 certifications held.
Certification Details
Frequently Asked Questions
Does a CISSP count toward the CCSP experience requirement?→
Yes. ISC2 states that an active CISSP can be substituted for the entire CCSP experience requirement.
Are the CISSP and CCSP exams the same length?→
Yes. Both are computerized adaptive tests with 100 to 150 questions in 3 hours and a passing score of 700 out of 1000.
Sources
- CISSP Certification Exam Outline
- CCSP Certification Exam Outline
- ISC2 Exam Pricing
- ISC2 Member Policies (CPE requirements)
- ISC2 Annual Maintenance Fees (AMF)
- ISC2 Certification Maintenance Handbook
- CISSP - Certified Information Systems Security Professional
- CISSP Experience Requirements
- CISSP Experience Waiver Updates
- CISSP Exam Refresh FAQ
- Become an Associate of ISC2
- CCSP - Certified Cloud Security Professional
- ISC2's CCSP Exam Outline Revised as Cloud Skills Remain in High Demand
- ISC2 Cybersecurity Certifications
Exam details come from official issuer pages and are listed in the sources above. Fees and exam versions change; confirm with the issuer before registering.