Two of the industry’s most highly regarded cloud security credentials are the CCSP from (ISC)² and the CCSK from Cloud Security Alliance (CSA). Both offer a comprehensive education on cloud security fundamentals, but there are important differences. Here’s a quick breakdown of each.

CCSP (Certified Cloud Security Professional). The CCSP is for IT and information security leaders seeking to prove their understanding of cybersecurity and securing critical assets in the cloud. It shows you have the advanced technical skills and knowledge to design, manage and secure data, applications and infrastructure in the cloud.

Roles that typically require a CCSP include Cloud Computing Analyst, Cloud Administrator, Cloud Architect, Cloud Engineer, Enterprise Architect, Security Administrator, Security Architect and Systems Engineer.

To qualify for the CCSP, you must have a minimum of 5 years cumulative paid work experience in information technology, of which 3 years must be in information security and 1 year in 1 or more of the 6 domains of the CCSP CBK.

CCSK (Certificate of Cloud Security Knowledge). The CCSK is administered by CSA and certifies competency in key cloud security areas.

Roles that typically use the knowledge gained through the CCSK include Cloud Computing Analyst, Cloud Administrator, Cloud Architect, Cloud Engineer, Enterprise Architect, Security Administrator, Security Architect and Systems Engineer.

In contrast to the CCSP, the CCSK has no experience requirements. You earn the certificate by passing the test. The CCSK test asks participants to demonstrate knowledge of three key documents: the CSA Guidance, the CSA Cloud Control Matrix and the ENISA report.

Other Differences

An important distinction is that the CCSP is a certification and the CCSK is a certificate. A certification recognizes a candidate’s knowledge, skills and abilities typically as framed by a job role. A certificate scope is narrower, and only provides proof of a training course completion.

A certification grants a candidate access to a membership organization, and almost always requires an annual continuing professional education (CPE) commitment to maintain the certification. But a certificate does not often associate one with any membership organization, and the body of knowledge gained does not evolve over time or require CPE.

Takeaway

In many ways, the CCSP and CCSK credentials complement each other. Because the CCSP recognizes the value of CCSK and has a provision that CCSK can be substituted for 1 year of required experience, the CCSK is often viewed as a good start along the path to earning a CCSP later.

Achieving CCSP certification provides the added benefit of membership in (ISC)², the world’s largest nonprofit association of cybersecurity professionals. More than 140,000 members strong and growing, (ISC)² offers its members professional development courses through the Professional Development Institute (PDI); continuing professional education through industry events such as the global Security Congress ; technical webinars discussing areas of developing cybersecurity trends; and benefits such as Member Perks, the (ISC)² Community and the bimonthly InfoSecurity Professional magazine.

For a deeper dive into these two credentials, read the article, Comparing the CCSP and CCSK .