The CCSP domains are drawn from various information security and cloud security topics within the (ISC)2 CBK. The CCSP CBK consists of the following 6 domains:

Domain 1: Cloud Concepts, Architectural Design.

• Cloud computing concepts
• Cloud reference architecture
• Security concepts related to cloud computing
• Secure design principles of cloud computing
• Identification of trusted cloud services

Domain 2: Cloud Data Security.

• Cloud Data Lifecycle
• Design and Implementation of Cloud Data Storage Architectures
• Design and Application of Data Security Strategies
• Knowledge and Implementation of Data Discovery and
Classification Technologies
• Design and Implementation of related Jurisdictional Data Security
for Personally Identifiable Information (PII)
• Design and Implementation of Data Rights Management
• Planning and Implementation of Data Retention, Removal,
and Archiving Policies
• Design and Implementation of Auditability, Detection
and Accountability of Data Events

Domain 3: Cloud Platform Infrastructure Security.

• Cloud Infrastructure components
• Cloud infrastructure risk assessment
• Designing and planning of security controls
• Disaster Recovery and Business Continuity Management Plans

Domain 4: Cloud Application Security.

• Application security training and awareness
• Cloud software validation and assurance
• Usage of verified software
• Understanding of Software Development Life Cycle (SDLS)
• Application of Security Software Development Lifecycle
• Cloud application architecture
• Designing of IAM (Identity and Access Management) solutions