# ISC2 CCSP: study planner and exam-day checklist

Domain weights come from the CCSP Certification Exam Outline, effective 1 August 2026; rules from ISC2's
outline page, Computerized Adaptive Testing FAQ, exam pricing and member policies, all read on
2 October 2026. ISC2 does not recommend a number of study hours; the budgets and the split are our
suggestion, in proportion to the published weights.

## Hours by domain

| Domain | Weight | 100 hours | 150 hours | 200 hours |
|---|---|---|---|---|
| 1. Cloud Concepts, Architecture and Design | 17% | 17 | 25.5 | 34 |
| 2. Cloud Data Security | 20% | 20 | 30 | 40 |
| 3. Cloud Platform and Infrastructure Security | 17% | 17 | 25.5 | 34 |
| 4. Cloud Application Security | 16% | 16 | 24 | 32 |
| 5. Cloud Security Operations | 17% | 17 | 25.5 | 34 |
| 6. Legal, Risk and Compliance | 13% | 13 | 19.5 | 26 |
| **Total** | **100%** | **100** | **150** | **200** |

## How the exam works (ISC2)

- [ ] Computerized Adaptive Testing for all CCSP exams since 1 October 2025
- [ ] 100 to 150 items in up to 3 hours
- [ ] 700 out of 1000 to pass
- [ ] Languages: English, Chinese, Japanese and German
- [ ] No item review on an adaptive exam: once you finalize an answer, it is final

## Pace for timed practice

| Set | Items | Time at 150 items in 3 hours |
|---|---|---|
| One item | 1 | 72 seconds |
| Short timed set | 25 | 30 minutes |
| Maximum length | 150 | 3 hours |

## Cost and upkeep

- [ ] Exam: US$599 (EUR 575.04 in EMEA, GBP 485.19 in the UK)
- [ ] Annual maintenance fee: US$135, one fee covering every ISC2 certification you hold
- [ ] CPE: 90 credits per three-year cycle (60 in Group A)

## Experience

- [ ] Five years cumulative, full-time in IT; three in cybersecurity; one in one or more of the six CCSP domains
- [ ] CSA's CCSK certificate can substitute for one year; only one year can be waived