CCSP — Certified Cloud Security Professional

Exam CCSP ISC2 Advanced

Cloud security at architect level. The exam is vendor-neutral, so the labs here practise it on both Azure and AWS. The usual next step for a CISSP holder whose estate has moved to cloud. ISC2 revised the outline on 1 August 2026; the main course follows an earlier one, so the steps after it fill the gaps.

8 courses · 52 sections · 265 lectures · 57 labs · ≈ 37 h of hands-on labs

All 57 CCSP hands-on labs on one page →

Free to start: the free lessons and guides for this roadmap →

Exam domains

Cloud Concepts, Architecture and Design — 17%
Cloud Data Security — 20%
Cloud Platform and Infrastructure Security — 17%
Cloud Application Security — 16%
Cloud Security Operations — 17%
Legal, Risk and Compliance — 13%

FreeThe 6 CCSP Domains Explained

Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.

The path

Start here →

Step 1 — Learn the six CCSP domains

Cloud concepts, data, platform, application, operations and legal. This course follows an earlier CCSP outline (its domain names date from 2015) and is light on platform, operations and legal: the next steps cover those.

1 course · 8 sections · 62 lectures

Learn

CourseCertified Cloud Security Professional - CCSP (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 62 lectures
1. Training Overview 2
2. Introduction - Sec 1 2
3. Section 2: Domain 1: Architectural Concepts and Design Requirements 14
4. Section 3: Domain 2: Cloud Data Security 11
5. Section 4: Domain 3: Cloud Platform and Infrastructure Security 4
6. Section 5: Domain 4: Cloud Application Security 16
7. Section 6: Domain 5: Operations 7
8. Section 7: Domain 6: Legal and Compliance 6

Step 2 — Cloud platform, infrastructure and operations

Secure the platform and run it, on Azure and on AWS, with business continuity and disaster recovery planned in.

2 courses · 11 sections · 49 lectures · 42 labs

Learn

CourseIntroduction to Cloud Security with Microsoft Azure (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 41 lectures
1. Introduction 3
2. Basics of the Cloud 5
3. Basics of Azure 5
4. Virtualization 8
5. Redundancy 5
6. Security 6
7. Active Directory 6
8. Security in Action 3
CourseBusiness Continuity and Disaster Recovery Planning (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 8 lectures
1. Descrition 1
2. BCP / DRP 6
3. Audio Version of Training 1

Practise

Infra LabsAzure Security Technology Solutions — 10 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure Authentication for an Azure Web AppLevel: GuidedDuration: 30 min
- Configure Virtual Network Connectivity by Using PeeringLevel: GuidedDuration: 30 min
- Configure an Application Security GroupLevel: GuidedDuration: 30 min
- Can You Configure Network Security to Allow Application Traffic?Level: AdvancedDuration: 45 min
- Configure Azure Disk EncryptionLevel: GuidedDuration: 30 min
- Can You Harden Virtual Machines in Azure?Level: AdvancedDuration: 1 h
- Configure Security by Using the Azure Kubernetes ServiceLevel: GuidedDuration: 30 min
- Create Azure Resource Locks on a Web AppLevel: GuidedDuration: 30 min
- Can You Configure Multi-Scope Network Security?Level: AdvancedDuration: 45 min
- Can You Configure Multi-Scope Resource Permissions?Level: ExpertDuration: 1 h
Infra LabsAzure Network Security — 13 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure a Network Security Group in a Virtual NetworkLevel: GuidedDuration: 30 min
- Configure Route Tables in a Virtual NetworkLevel: GuidedDuration: 30 min
- Configure Global Virtual Network PeeringLevel: GuidedDuration: 30 min
- Can You Implement a Secure Azure Virtual Machine Network?Level: AdvancedDuration: 1 h
- Configure a Virtual Network Service EndpointLevel: GuidedDuration: 30 min
- Implement Security for an Azure Web AppLevel: GuidedDuration: 30 min
- Can You Implement Security for an Azure Web App?Level: AdvancedDuration: 45 min
- Create an API Management InstanceLevel: GuidedDuration: 30 min
- Can You Configure an API Management Solution?Level: AdvancedDuration: 1 h 30 min
- Can You Create a Secure Web App?Level: ExpertDuration: 1 h
- Log Virtual Machine Network Traffic by Using Network WatcherLevel: GuidedDuration: 30 min
- Monitor Communication Between Virtual Machines by Using Network WatcherLevel: GuidedDuration: 30 min
- Implement an Azure Function AppLevel: GuidedDuration: 30 min
Infra LabsAWS Certified Security - Specialty — 14 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure Secure Identities by Using AWS ServicesLevel: GuidedDuration: 30 min
- Respond to Compromised AWS ResourcesLevel: GuidedDuration: 30 min
- Use CloudWatch Alarms to Generate AlertsLevel: GuidedDuration: 30 min
- Configure Logging for an EC2 WebsiteLevel: GuidedDuration: 1 h
- Detect AWS Threats and Automate RemediationLevel: GuidedDuration: 45 min
- Configure AWS Network Security for EC2 ResourcesLevel: GuidedDuration: 30 min
- Protect AWS Network Resources by Using WAFLevel: GuidedDuration: 30 min
- Configure a Secure Custom AMILevel: GuidedDuration: 30 min
- Can You Deploy Secure AWS EC2 Resources?Level: AdvancedDuration: 1 h
- Implement AWS Credentials and Policies by Using IAMLevel: GuidedDuration: 30 min
- Secure Remote Administration for EC2 InstancesLevel: GuidedDuration: 30 min
- Implement Encryption and Manage the Lifecycle of Data at RestLevel: GuidedDuration: 30 min
- Can You Provide Secure Access to AWS Data and ResourcesLevel: AdvancedDuration: 1 h
- Can You Configure a Secure AWS EnvironmentLevel: ExpertDuration: 1 h
Infra LabsAWS Security and Compliance SOA.4 — 5 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure Security for an IAM UserLevel: GuidedDuration: 30 min
- Implement an IAM PolicyLevel: GuidedDuration: 30 min
- Implement a Security Monitoring ProcessLevel: GuidedDuration: 30 min
- Implement Encryption at RestLevel: GuidedDuration: 30 min
- Implement Protection for Data and InfrastructureLevel: GuidedDuration: 30 min

Step 3 — Cloud data and application security, including AI

Protect data and applications in the cloud, including generative AI and LLM applications.

1 course · 11 sections · 47 lectures · 10 labs

Learn

CourseGenerative AI Risks & Cybersecurity: LLM Security (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
11 sections · 47 lectures
1. Training Overview 1
2. - Introduction & Lab Setup 4
3. - The GenAI Threat Landscape 4
4. - Prompt Injection & Jailbreaking 6
5. - AI-Specific Attack Vectors 6
6. - Defending GenAI Systems 8
7. - Secure GenAI Development 5
8. - Governance, Compliance & Ethics 6
9. - Emerging Threats & Future 4
10. - Capstone & Conclusion 2
11. Audio Version of the Course 1

Practise

Infra LabsAzure Secure Data & Applications — 10 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure Application Insights and App Service Logs for a Web AppLevel: GuidedDuration: 30 min
- Configure Security Recommendations for an Azure Virtual MachineLevel: GuidedDuration: 1 h
- Can You Enable Secure Virtual Machines and Application Services?Level: AdvancedDuration: 45 min
- Enable Database Auditing for an Azure SQL DatabaseLevel: GuidedDuration: 30 min
- Enable Microsoft Defender for SQL in an Azure SQL DatabaseLevel: GuidedDuration: 30 min
- Can You Enable Security for an Azure SQL Database?Level: AdvancedDuration: 45 min
- Manage Shared Access Signature KeysLevel: GuidedDuration: 30 min
- Configure Security for an Azure Cosmos DB AccountLevel: GuidedDuration: 30 min
- Can You Implement Security for an Azure Cosmos DB Account and a Storage Account?Level: AdvancedDuration: 45 min
- Can You Manage Security for Virtual Machines and Databases?Level: ExpertDuration: 1 h

Step 4 — Legal, risk and compliance

Privacy and legal requirements, risk management and compliance for cloud services.

2 courses · 19 sections · 99 lectures · 5 labs

Learn

CourseGRC Fundamentals - Learn Governance, Risk, and Compliance (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 28 lectures
1. Course Overview 2
2. Introduction 1
3. Introducing GRC 5
4. Risk Management 7
5. Compliance 5
6. Advancing GRC in an Organization 6
7. Conclusion 1
8. Audio Version of Training 1
CourseEU GDPR Foundations Course (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
11 sections · 71 lectures
1. Training Overview 2
2. Introduction 1
3. Module 1: Privacy origins and GDPR basics 11
4. Module 2: Legitimate purposes and principles 6
5. Module 3: Transparency through Privacy Notice 5
6. Module 4: Inventory of processing activities and retention 8
7. Module 5: Consent and Data Subject Access Requests 9
8. Module 6: Data Protection Impact Assessment and risk assessments 9
9. Module 7: Security of personal data and privacy by design 6
10. Module 8: Data transfers and managing third parties 6
11. Module 9: Data breaches 8