OtherSelf-paced; most people need 20 to 40 hours of study, plus a 2-hour exam·$445 for the exam token (two attempts); training is extra

Cloud Security Alliance CCSK v5 (Certificate of Cloud Security Knowledge)

4.0

Still the best value vendor-neutral cloud security credential, and v5 finally treats AI workloads as part of cloud security instead of a footnote. It is a knowledge exam, open book, with no hands-on component. That makes it a strong foundation and a weak proof of practical skill.

What We Liked

$445 with two attempts usable over two years is reasonable for a recognised credential
Vendor neutral, so it is useful whichever cloud you work in
v5 adds real AI and generative AI material and drops dated IoT and mobile content
The underlying CSA Security Guidance is free to read, so you can study without buying anything
Shows up in job ads and is a common stepping stone to CCSP

What Could Be Better

Open-book exam rewards fast lookup in the guidance document more than understanding
No labs unless you pay for the separate CCSK Plus class
AI coverage is broad but shallow; it will not teach you to secure a model serving stack in depth
Search interest has dropped by about a third over the past year as AI-specific certs pull attention

Detailed review

CCSK has been around since 2010 and it remains the cheapest recognised way to show you understand cloud security in general rather than one provider's console. Version 5 is a proper rewrite. The body of knowledge is now 12 domains: cloud computing concepts, governance, risk and compliance, organisation management, identity and access management, security monitoring, infrastructure and networking, workload security, data security, application security, incident response, and a domain on related and emerging technologies. CSA says the AI and generative AI material was significantly expanded, and the IoT and mobile content that made v4 feel stale was cut. The exam is 60 multiple-choice questions drawn from a pool, 120 minutes, open book, taken online.

You need 80% to pass. $445 buys a token with two attempts that you can use over two years. The open-book format is the thing to understand. It sounds easy and it is not. Two minutes per question does not leave much time to search the guidance, and the questions are written to punish people who skim.

The best preparation is to read the free Security Guidance end to end once, take notes by domain, and then do practice questions. I would budget 20 hours if you already work in cloud security, and closer to 40 if you do not. On AI, v5 is a real improvement but do not oversell it to yourself. You will learn where AI workloads change the shared responsibility model, why training data and model artefacts need the same data security thinking as anything else, and where AI fits in the threat picture. You will not come out able to threat model an agent with tool access, red team a RAG system, or harden a GPU cluster.

For that you need hands-on material. The credential itself still travels. It does not expire, recruiters recognise it, and it maps neatly onto ISC2's CCSP if you go further. Search interest has fallen over the past year, which I read as attention moving toward AI-specific credentials rather than CCSK losing relevance. Most AI systems run in the cloud, and the people securing them still need this foundation. I give it 4.0.

Fair price, honest exam, free study material and now relevant to AI. The lack of hands-on work is the main thing holding it back.

[ final ]

The verdict.

A good first cloud security credential for engineers, architects and GRC people, and a better buy than it was now that AI is in scope. If you want AI security specifically, pair it with something hands-on, or look at CSA's own TAISE.