ISC2 Certified Cloud Security Professional 2026 outline (effective Aug 1, 2026) · Domain 6: Legal, risk & compliance

Risk frameworks and metrics: ISO/IEC 31000, ENISA cloud risk guidance, NIST SP 800-37, and assessing a provider's risk management

Last reviewed September 29, 2026 · Leer en español

Risk frameworks give structure and a shared language to risk management, so that decisions are consistent and defensible. The CCSP outline names several frameworks and asks you to understand metrics and how to judge whether a provider manages its own risks well.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 3 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Study CCSP for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.

Open the CCSP study plan