ISC CCSP 試験概要:
| 認定ベンダー: | (ISC)² |
| 試験名: | 認定クラウドセキュリティプロフェッショナル |
| 試験番号: | CCSP |
| 試験時間: | 180 分 |
| 合格点: | 700/1000 |
| 認定の有効期間: | 3年 |
| 関連資格: | CISSP CISA |
| 出題数: | 125 |
| 試験形式: | 多肢選択式 |
| 対応言語: | ドイツ語, 日本語, 英語, ブラジルポルトガル語, 韓国語 |
| 受験料: | USD 595 |
| サンプル問題: | ISC CCSP サンプル問題 |
| 受験方法: | Pearson VUE 試験会場(会場受験のみ) |
| 前提条件: | 情報技術分野における5年以上の通算有給実務経験が必要で、そのうち3年以上はクラウドセキュリティであること。なお、CISSP は1年分として代替可能 |
| 公式シラバスのURL: | https://www.isc2.org/certifications/ccsp |
ISC CCSP 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Cloud Application Security: Covers secure application development practices, including SDLC, threat modeling, API security, software assurance, and Identity and Access Management (IAM) design.
|
| トピック 2 | - Cloud Security Operations: Deals with day-to-day operational security, covering infrastructure maintenance, access controls, monitoring, incident management, digital forensics, and stakeholder communication.
|
| トピック 3 | - Legal, Risk and Compliance: Addresses legal, privacy, and regulatory requirements unique to cloud computing, along with audit processes, enterprise risk management, and cloud contract design.
|
| トピック 4 | - Cloud Data Security: Focuses on protecting and governing data throughout its cloud lifecycle, including encryption, classification, data loss prevention, rights management, and ensuring auditability of data events.
|
| トピック 5 | - Cloud Concepts, Architecture and Design: Covers foundational cloud models, roles, deployment types, and security design principles, including how to evaluate cloud service providers against established standards.
|
参照:https://www.isc2.org/certifications/ccsp/ccsp-certification-exam-outline#Domain%206:%20Legal,%20Risk%20and%20Compliance