ISC2 CCSP Study Roadmap

Domain 1: Cloud Concepts — Service models, deployment models, shared responsibility

Domain 1: Reference architecture, security concepts for cloud

Domain 2: Cloud Data Security — Data lifecycle, storage architectures, classification

Domain 2: Data security technologies, DLP, encryption, key management

Domain 3: Cloud Platform Security — Infrastructure components, data center design

Domain 3: Risk analysis for cloud infrastructure, virtualization security

Domain 4: Cloud Application Security — Training, SDLC in cloud, DevSecOps

Domain 4: Application security testing, API security, identity federation

Domain 5: Cloud Security Operations — Physical/logical infrastructure, operations

Domain 5: Operational controls, standards, change management, continuity

Domain 6: Legal, Risk, Compliance — Legal requirements, privacy, audit process

Full Review: Practice exams, cross-domain scenarios, exam preparation