CSA CCSK
Cloud Security Alliance Certificate of Cloud Security Knowledge
The CCSK from the Cloud Security Alliance is one of the most widespread vendor-neutral cloud security certifications worldwide. It is based on three core sources: the CSA Security Guidance v4, the ENISA Cloud Computing Risk Assessment, and the CSA Cloud Controls Matrix (CCM). The exam is fully online and open-book — this lowers the entry barrier but also means less practical proof than e.g. CCSP. No professional experience required, no expiration date. Good as an entry point into cloud security and as preparation for the CCSP, but not a strong career building block on its own.
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Built for these roles
› Exam format
Online, open-book, 60 questions, 90 minutes, 80% passing score
Exam token includes 2 attempts. Additional attempts $395 each.
› Recertification
No expiration date (lifetime certification)
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 1 domain this cert is centrally about. Passing the exam demonstrates working knowledge of each.
› Prerequisites
None
› Progression
requiredrecommendedWhere this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.
No vendor-gated prereqs.
No de facto priors typically expected.
No certs require this one.
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- CSA Security Guidance v5 — Cloud Security Alliance
- ENISA Cloud Computing Risk Assessment — ENISA
- CSA Practice Tests (free)
› Version & lifecycle
v5 launched April 2024 alongside CSA Security Guidance v5.
› Salary signal
Cloud security analyst / cloud generalist, US, 2–5 years.
Robert Half Salary Guide + Glassdoor aggregations · 2024 · US base only · p25–p75 range
› How it compares
CCSK is the vendor-neutral entry point; CCSP is deeper and gates on experience verification.
↔ Compare side-by-side› Careers that commonly pursue this cert
Secure cloud infrastructure across AWS, Azure, and GCP. Specialize in the shared responsibility model and cloud-native controls.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.