Skip to content

Cloud Security Alliance (CSA) Certifications

About the Cloud Security Alliance

The Cloud Security Alliance (CSA) is the world's leading organization dedicated to defining and raising awareness of best practices for a secure cloud computing environment. Founded in 2008, CSA is a not-for-profit organization with a mission to promote the use of best practices for providing security assurance within cloud computing and to provide education on the uses of cloud computing to help secure all other forms of computing.

CSA operates extensive research working groups that produce freely available guidance documents, tools, and frameworks used throughout the cloud security industry. Key CSA resources include:

  • Security Guidance for Critical Areas of Focus in Cloud Computing - The foundational cloud security guidance document, currently at version 5 (published 2024)
  • Cloud Controls Matrix (CCM) - A cybersecurity control framework for cloud computing with 197 control objectives across 17 domains
  • Consensus Assessments Initiative Questionnaire (CAIQ) - A set of questions a cloud consumer may ask of a cloud provider
  • STAR Registry (Security, Trust, Assurance and Risk) - Public registry of cloud service provider security assessments
  • Enterprise Architecture Reference Model
  • Top Threats to Cloud Computing - Annual threat report

Certifications Offered

Individual Certifications

  • CCSK (Certificate of Cloud Security Knowledge) - The industry's first cloud security user certification, now at version 5. Online, open-book, multiple choice exam covering the CSA Security Guidance v5 and the Cloud Controls Matrix.
  • CCZT (Certificate of Competence in Zero Trust) - Covers zero trust architecture principles and implementation.
  • CCAK (Certificate of Cloud Auditing Knowledge) - Joint credential with ISACA for cloud audit professionals.
  • CCSK Plus - CCSK certification combined with hands-on labs.

Organizational Certifications

  • STAR Level 1: Self-Assessment - Free self-assessment publication in the STAR Registry
  • STAR Level 2: Third-Party Audit - Includes STAR Attestation (SOC 2 + CCM) and STAR Certification (ISO 27001 + CCM)
  • STAR Level 3: Continuous Auditing - In development

Certifications in This Repository

1 certification in this repo. Counts and statuses are generated from docs/certs.json.

Cert Code Level Status Notes
CCSK v5 - Certificate of Cloud Security Knowledge - - Ready 8

About CCSK

The CCSK is widely considered the foundational credential for cloud security knowledge. It is vendor-neutral and focuses on cloud security principles applicable across all cloud service providers and deployment models. Many cloud security professionals pursue CCSK before or alongside cloud-provider-specific certifications.

CCSK v5 was released in 2024 and reflects the updated CSA Security Guidance v5 and Cloud Controls Matrix v4. The exam is delivered online through the CSA portal and does not require an in-person testing center visit.

Certification Maintenance

  • CCSK: No recurring fees. Certification does not expire, though holders are encouraged to retake the exam when major versions of the Security Guidance are released to stay current.
  • CCZT, CCAK: Follow respective maintenance requirements for their issuing bodies.

Official Resources

  • CSA Website: https://cloudsecurityalliance.org
  • CCSK Page: https://cloudsecurityalliance.org/education/ccsk
  • Security Guidance v5 (free download): https://cloudsecurityalliance.org/research/guidance
  • Cloud Controls Matrix: https://cloudsecurityalliance.org/research/cloud-controls-matrix
  • STAR Registry: https://cloudsecurityalliance.org/star/registry
  • Research Working Groups: https://cloudsecurityalliance.org/research/working-groups