CCSP Certification Cost in 2026
The ISC2 exam fee is the small line. The 60 to 120 hour study window at cloud-security-engineer loaded salary is the large one. Total realised cost commonly $9,000 to $12,000 per pass.
How much does CCSP certification cost? ISC2 sets the Certified Cloud Security Professional exam fee at $599[isc2.org] (US). Prep adds anywhere from about $100 (self-study: Sybex Official Study Guide plus practice exams) to $3,000 to $4,000 (instructor-led boot camp). ISC2 charges a $135[isc2.org] Annual Maintenance Fee. The dominant cost is study time: at a senior cloud-security engineer’s loaded rate, a realised CCSP runs to roughly $9,000 to $12,000 all-in once indirect cost is counted. Exam fee and AMF verified against the public ISC2 CCSP page as of June 2026.
CCSP Direct Cost by Prep Path
| Prep Path | Direct Cost | Best for | Source |
|---|---|---|---|
| ISC2 exam fee (US) | $599 | Universal: every path adds this | isc2.org (published) |
| Self-study: Sybex CCSP Official Study Guide + practice tests | $100 to $260 | Self-motivated; prior security experience | Sybex / Wiley published price |
| Third-party self-paced course + practice bank | $300 to $900 | Structured curriculum, self-paced | Provider published (range) |
| Official ISC2 / authorised-partner instructor-led boot camp | $3,000 to $4,000 | Structured learners; concentrated study week | Training-provider published (range) |
| Annual Maintenance Fee (AMF) | $135/yr | Ongoing post-cert maintenance | isc2.org (published) |
The exam fee ($599) and Annual Maintenance Fee ($135/yr) are ISC2 published figures verified against the public CCSP page as of June 2026. Self-study and course ranges are typical published street prices and vary by provider and sale; verify each provider’s current price directly. A failed attempt means a fresh $599 registration under ISC2’s retake policy, so first-attempt readiness is the main direct-cost lever.
CCSP Exam Format and the 1 August 2026 Outline Change
Since 1 October 2025 the English-language CCSP exam has used Computerized Adaptive Testing (CAT): 100 to 150 items delivered in a three-hour window, with each question’s difficulty adjusting to your performance, and a scaled passing score of 700 out of 1000. This mirrors the format ISC2 already used for CISSP.
On 1 August 2026 ISC2 introduces a refreshed CCSP exam outline based on its most recent Job Task Analysis, with more emphasis on cloud AI/ML security. This is a content update, not a format overhaul: the six domains stay, and the adaptive three-hour format stays. If you test on or after 1 August 2026, study to the new outline; ISC2 publishes the current exam outline on its CCSP certification page. Candidates already deep into prep for a pre-August sitting are unaffected.
The six domains of the CCSP Common Body of Knowledge are: Cloud Concepts, Architecture and Design; Cloud Data Security; Cloud Platform and Infrastructure Security; Cloud Application Security; Cloud Security Operations; and Legal, Risk and Compliance. Their relative weightings shift slightly under the 2026 outline, but the structure is unchanged.
The Real Cost: 60 to 120 Hours at Loaded Rate
CCSP is more focused than CISSP, so its study curve is lighter, but the same economics apply: the indirect cost of study time dominates the direct cost of the exam. Candidates who already meet the experience requirement commonly need 60 to 120 hours of study over 2 to 4 months to cover the six cloud-security domains and practice-exam time. Less experienced candidates, and those coming from a non-cloud security background, routinely need more.
For a senior cloud-security engineer at a fully-loaded salary of $190,000 ($147,000 base plus benefits and overhead), the hourly loaded rate is approximately $91. At 90 study hours the indirect cost is 90 × $91 = $8,190. Add direct cost (Sybex self-study path at about $150 plus exam $599) and the total per-engineer realised cost is approximately $8,940. The boot-camp path adds another $3,000 to $4,000 in direct cost; it earns that premium for candidates who need a concentrated, calendar-forcing study week rather than dispersed self-study.
At a small cloud-security team scale (10 engineers credentialing in a single year via self-study) the realised cohort cost is roughly $90,000. That is well below the loaded cost of hiring a single already-credentialed senior cloud-security engineer from market, and it produces 10 newly-credentialed engineers across the team.
For the direct-plus-indirect framework in detail see calculator methodology, and for the salaried-staff wage basis behind the loaded rate see facilitator and trainer rates.
Experience Requirement and the CISSP Waiver
CCSP requires five years of cumulative paid IT work experience, including three years in information security and at least one year in one or more of the six CCSP domains. Holding CISSP in good standing satisfies the entire CCSP experience requirement, which is one reason many security professionals earn CISSP first and add CCSP for cloud-specific roles.
Candidates who lack the experience can still sit and pass the exam to become an Associate of ISC2, then have six years to earn the required experience and convert to full CCSP. The exam fee, study effort, and prep cost are identical on either path; only the post-exam endorsement timeline differs. The Associate of ISC2 route carries a lower Annual Maintenance Fee ($50/yr) than the $135 full-member rate while you accrue the experience.
CCSP is a common requirement for cloud-security-architect and cloud-security-engineer roles, and it appears in enterprise security hiring specs alongside CISSP for cloud-heavy environments. Its audit-evidence value parallels CISSP’s: named cloud-certified staff support the qualified-personnel controls that SOC 2 and ISO 27001 auditors look for in cloud-native organisations.