CSA CCZT
Certificate of Competence in Zero Trust (CCZT)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certificate of Competence in Zero Trust (CCZT) is a vendor-neutral Zero Trust training and certificate program from the Cloud Security Alliance. CSA describes it as built on foundational Zero Trust components released by CISA and NIST, CSA Research work on the Software Defined Perimeter, and guidance from Zero Trust experts including John Kindervag, credited as the founder of the Zero Trust philosophy. It is aimed at key stakeholders in organizations planning to adopt, architect, and implement Zero Trust governance and risk posture, including C-suite executives, managers and decision-makers, security engineers, architects, analysts and administrators, and compliance managers. The exam covers seven topic areas: Zero Trust Architecture, Software Defined Perimeter, Zero Trust Strategy, Zero Trust Planning, Zero Trust Implementation, NIST and CISA Best Practices, and Zero Trust Foundational Concepts. The exam is open-book and online, with 60 multiple-choice questions drawn randomly from a larger pool, a 120-minute limit, and a minimum passing score of 80%. Purchase costs $175 and provides two test attempts usable within two years. Preparation options include a free Prep Kit for self-study and training in self-paced or instructor-led formats; training and the exam are offered only in English. No official work experience or prior qualification is required, though basic grounding in cloud security helps, and CSA notes the CCSK as an excellent precursor.
What you'll study
About CSA CCZT preparation
What is the CCZT exam format?
It is an open-book, online exam with 60 multiple-choice questions selected randomly from a larger pool. You have 120 minutes to complete it, and the minimum passing score is 80%. Training and the exam are offered only in English.
How much does the CCZT cost and how many attempts do I get?
Purchase of the exam costs $175 and provides two test attempts, which you have two years to use. CSA corporate membership includes discounts on the CCZT and team training credits, which may matter if your employer is a member.
Is the CCZT difficult?
Treat it as a serious exam. One information security architect quoted by CSA calls it not an easy exam and recommends reading all provided study materials, then reading them again. The 80% passing threshold leaves little room for gaps across the seven topic areas.
What topics does the exam cover?
The seven areas are Zero Trust Architecture, Software Defined Perimeter, Zero Trust Strategy, Zero Trust Planning, Zero Trust Implementation, NIST and CISA Best Practices, and Zero Trust Foundational Concepts. Expect breadth across all of them rather than deep specialization in one.
Do I need prerequisites or work experience?
No official work experience or prior qualification is required. CSA says it helps to have a basic grounding in cloud security, and describes the CCSK as an excellent precursor to CCZT training, which is useful if you are deciding what to study first.
How should I prepare for the CCZT?
Start with CSA's free Prep Kit, which CSA says comes with everything you need to study. If you prefer structured learning, enroll in self-paced online training or instructor-led training, online or in person. Note that supplemental SDP courses are not required for or included in the exam or study materials.
What is a common failure mode on the CCZT?
Underestimating breadth. Candidates often over-focus on one area, such as architecture, and neglect strategy, planning, and implementation, or skip the NIST and CISA material. Because questions are drawn randomly from a larger pool, any weak domain can surface.
Who should take the CCZT?
CSA positions it for all key stakeholders adopting, architecting, and implementing Zero Trust governance and risk posture: C-suite executives, managers and decision-makers, security engineers, architects, analysts and administrators, and compliance managers. It supports career paths in security, engineering, management, product marketing, auditing and compliance, and executive roles.
What do I receive after passing?
CSA states you earn a digital badge and certificate, which you can display on digital profiles and resumes to demonstrate verified expertise. CSA also notes the program received a Silver award for Cybersecurity Education and Training in the 2025 Globee Awards for Cybersecurity.