匠人学院 JR Academy学AI来匠人
匠人学院 JR Academy学AI来匠人

Follow Us

linkedinfacebooktwitterinstagramyoutube

We Accept

/image/layout/pay-paypal.png/image/layout/pay-visa.png/image/layout/pay-master-card.png/image/layout/pay-airwallex.png/image/layout/pay-alipay.png
EN

Company

About UsMetaverse ClassroomNews & BlogJR CareersBecome a MentorOur MentorsContact UsJR Store J3.Club

Resources

Job ReferralsEvents1-on-1 TutoringIndustry WhitepapersOnline LearningInterview CenterShare Interview ExperienceInternshipMembership

AI Tools

AI ToolboxCert MasterJob HunterUniMate AI

AI Learning Paths

All Learning PathsAI EngineerContext EngineeringVibe CodingPrompt MasterAI BuilderAI Product ManagerPython Basics

AI in Practice

AI ProductivityAI Data AnalysisAI FinanceAI Content CreationAI Image CreationFrontend DevelopmentHermes AgentOpenClaw Local Agent

University Resources

University of MelbourneUniversity of QueenslandUNSW SydneyUniversity of SydneyMonash UniversityUniversity of AdelaideRMITQUTUTS

Kids AI Education

Airbotix — AI Coding for KidsAU Family Resource HubNAPLAN Report GuideMy School Data GuideSydney Private School Fees 2026Kids Coding Programs

Immigration Services

Australia ImmigrationSkilled Visa 189/190/491Employer Sponsored 482/186/494Business Visa 188/888UK ImmigrationUS ImmigrationCanada Immigration

Enterprise

P3 Career IncubatorEnterprise (EN)Corporate TrainingInternship PartnershipRecruitment PartnershipApply for Partnership

Job Application Agent

Job Application ServiceJob MonitoringLinkedIn ManagementLinkedIn NetworkingLearn about P3

Support

FAQsTerms & ConditionsPrivacy PolicyCancellation & Refund PolicySite map

Top Categories

Web Full-Stack BootcampDevOps BootcampData Engineering BootcampData Analysis BootcampCoding for BeginnersBusiness Analyst InternshipAlgorithm Bootcamp

Career Services

BA & PM InternshipData Science InternshipData Analysis InternshipMarketing InternshipResume ReviewInterview CoachingVIP Mentor Guidance

Addresses

Level 10b, 144 Edward Street, Brisbane CBD(Headquarter)
Level 2, 171 La Trobe St, Melbourne VIC 3000
45A13, Block B, Oriental Hope Tianxiang Plaza, 500 Tianfu Avenue Middle Section, Wuhou District, Chengdu, Sichuan, China
Business Hub, 155 Waymouth St, Adelaide SA 5000

Contact

hello@jiangren.com.au0421-672-555

Disclaimer

footer-disclaimerfooter-disclaimer

JR Academy acknowledges Traditional Owners of Country throughout Australia and recognises the continuing connection to lands, waters and communities. We pay our respect to Aboriginal and Torres Strait Islander cultures; and to Elders past and present. Aboriginal and Torres Strait Islander peoples should be aware that this website may contain images or names of people who have since passed away.

All content on the JR Academy website, including course materials, logos, and information provided, is protected under Australian intellectual property laws. Unauthorized use, sale, distribution, reproduction, or modification is strictly prohibited. Violations may result in legal action. By accessing our website, you agree to respect our intellectual property. JR Academy Pty Ltd reserves all rights, including patents, trademarks, and copyrights. Any infringement will be subject to legal prosecution. View Terms of Service

© 2017-2026 JR Academy Pty Ltd. All rights reserved.

ABN 26621887572

Certifications/其他/ISACA CCAK
其他助理级🔒 安全

ISACA Certificate of Cloud Auditing Knowledge (CCAK)

ISACA Certificate of Cloud Auditing Knowledge (CCAK) 认证备考练习，258+ 练习题附详解，助您高效通过考试。

Start PracticeBrowse Learning Path
75
Questions per exam
258
Question bank total
120m
Exam Duration
70/1000
Passing Score
$575
Exam Fee

At a glance

258 questions
Best for希望获得 ISACA CCAK 认证的 IT 专业人员, 网络工程师和系统管理员
Prep pace3-5 weeks with experience
Course pack6 chapters · 40 hours
Learner signal0 enrolled · 0/5
Exam Guide
?
Bottom line · It depends

ISACA 和 CSA（Cloud Security Alliance）联合推出的云审计认证，适合 IT 审计师拓展云安全审计能力。纯安全技术岗位不需要，CCSK 或 CCSP 更实用。

What this certification covers

This page is structured for quick scanning first: exam format, fit, prep time, and the actual study scope.

CCAK（Certificate of Cloud Auditing Knowledge）是 ISACA 与 Cloud Security Alliance（CSA）在 2020 年联合推出的认证，定位于云环境下的审计和治理。考试 75 题 / 120 分钟 / $575 USD（ISACA 会员 $475），及格线约 70%，有效期 3 年。

CCAK 是目前市场上唯一专门针对云审计的认证 — CCSP（ISC2）侧重云安全架构，CCSK（CSA）侧重云安全知识，而 CCAK 侧重于如何审计云服务提供商和云环境的安全控制。考纲覆盖：CSA Cloud Controls Matrix (CCM) v4、STAR（Security Trust Assurance and Risk）认证评估流程、SOC 2 云服务审计、CCM 控制域映射到 ISO 27001/NIST 800-53 的方法、DevSecOps 持续审计、云治理中的共享责任模型审计。

作为参考，CCM v4 包含 17 个控制域（如 Application & Interface Security、Audit & Assurance、Identity & Access Management 等）和 197 个控制目标。CCAK 不要求你背所有 197 个控制 — 但需要理解 17 个域的覆盖范围和审计方法。

You will work with

IT GovernanceRisk ManagementInformation SecurityAuditCompliance

After preparation

  • 获得 ISACA CCAK 官方认证
  • 掌握 CCAK 考试核心知识和技能
  • 提升专业领域竞争力

Exam details

Exam Code
CCAK
Provider
其他认证机构
Duration
120 minutes
Question Count
75 questions
Passing Score
70/1000
Validity
3 years
Exam Fee
$575 USD
Question Types
Single choice, Multiple select
Languages
English
Official Page
Open AWS page

Who should take it

Good fit

  • 希望获得 ISACA CCAK 认证的 IT 专业人员
  • 网络工程师和系统管理员
  • 希望提升专业技能的 IT 从业者
  • 计算机科学/网络工程专业学生

Before you start

  • 了解基本的网络安全概念
  • 有相关领域的工作经验
  • 建议先通过相关入门级认证

Is it worth it? Career value

Salary ranges, target job titles, and the real career impact of holding ISACA CCAK.

澳洲
$110K-155KAUD
美国
$100K-150KUSD
新加坡
$80K-125KSGD
Cloud AuditorIT Auditor (Cloud)GRC AnalystCloud Compliance Analyst云审计师IT 审计师

CCAK 是 2020 年才推出的新认证，市场渗透率还很低。LinkedIn 全球搜 "CCAK" 的岗位不到 100 个，大多数云审计岗位 JD 写的是 "CISA + cloud experience" 或 "CCSP preferred"。

这张证最大的价值是给已有 CISA 的审计师提供云审计的结构化知识 — CSA CCM 框架、STAR 评估流程、SOC 2 Type II 云报告解读这些在传统 CISA 考纲里覆盖不够。Big 4 的 Technology Risk/Cloud Assurance 团队会看重这个组合（CISA + CCAK）。

不适合的人：做云安全工程/架构的人（考 CCSP 或 AWS SCS-C02）、没有审计背景想进安全领域的人（先考 CISA 或 Security+）、只需要云安全基础知识的人（考 CCSK，免费且更轻量）。

Study preparation

With hands-on AWS

3-5 weeks

From scratch

6-10 weeks

Daily pace

1-2 hours/day

Learning path preview

6 chapters
1
ISACA CCAK 考试概述与备考指南
45 min
2
Cloud Governance and Compliance
70 min
3
Cloud Audit Methodology
70 min
4
Cloud Security Controls Assessment
70 min
5
Cloud Risk Assessment and Audit Reporting
70 min
6
考前冲刺与实战演练
60 min

Step-by-step preparation

A concrete week-by-week plan from past test-takers — not generic advice.

1

第一阶段：CSA CCM v4 框架（1-2 周）

下载 CSA 官网的 CCM v4 Excel 文件（免费），过一遍 17 个控制域。重点理解每个域的审计目标 — 比如 A&A（Audit & Assurance）域关注审计权限和审计频率，IAM（Identity & Access Management）域关注特权访问控制和联合身份管理。

2

第二阶段：STAR 评估 + SOC 2 审计（2 周）

STAR 认证的三个等级必须掌握：Level 1（Self-Assessment，免费公开）、Level 2（第三方审计，基于 ISO 27001 或 SOC 2）、Level 3（Continuous Auditing，持续评估）。SOC 2 Type I vs Type II 的区别是固定考点 — Type I 是 point-in-time 设计评估，Type II 是 period-of-time 运行有效性评估（通常覆盖 6-12 个月）。

3

第三阶段：共享责任模型 + 持续审计（1-2 周）

考试会考 IaaS/PaaS/SaaS 下云服务提供商和客户的审计责任边界。比如 IaaS 模式下物理安全和虚拟化层由 CSP 审计，OS 以上由客户审计。DevSecOps 持续审计（Continuous Auditing/Monitoring）的概念和工具（Cloud-native SIEM、CSPM 合规扫描）也会考。

4

第四阶段：模考（1 周）

ISACA 官方有 CCAK 模拟题。考试场景题比例高 — 给一个云迁移/云审计场景让你选择正确的审计方法或适用的 CCM 控制域。重点回顾 CCM 域的映射关系和 STAR 评估流程。

Real test-taker experiences

What it actually took for real candidates to pass — prep time, scores, and lessons learned.

已有 CISA，考 CCAK 是因为团队越来越多 SOC 2 Type II 云审计项目。**CCM v4 的 17 个控制域不需要背编号**，但需要知道每个域的审计重点。STAR Level 2 和 SOC 2 的关系是高频考点 — 要理解 STAR Level 2 可以基于 SOC 2 审计结果颁发。

IT Auditor 4 年约 78%
Big 4 Cloud Assurance 团队 · 5 weeks prep

非审计背景，做合规分析。考试比预期难 — 不是记住框架就行，场景题要求你根据具体情况判断用哪种审计方法（Attestation vs Examination vs Review）。建议没有审计经验的人先看 ISACA 的 IT Audit Fundamentals 课程打个底。

N. Kumar
Cloud Compliance Analyst · 8 weeks prep

Certification comparison

ISACA CCAKISACA CISACCSP
Provider其他其他其他
Level助理级专业级专业级
Fee$575$575$599
Duration120 min120 min180 min
Questions per exam75150150
Validity3 yrs3 yrs3 yrs

Study tips and common mistakes

💡

**CCM 控制域不用背编号但要知道范围** — 考试给场景让你选"这属于哪个 CCM 域"，记住 17 个域名和 1 句话描述即可。

💡

**STAR 三个等级的区别必考** — Level 1 = 自评（CSA CAIQ 问卷）、Level 2 = 第三方审计、Level 3 = 持续监控。每年至少出 3-4 道。

💡

**审计术语精确理解** — Attestation（鉴证）、Assurance（保证）、Compliance（合规）在审计语境中有严格定义，不能混用。

⚠️

**混淆 CCAK、CCSK 和 CCSP** — CCAK = 云审计（审计师用）、CCSK = 云安全知识（入门级，免费）、CCSP = 云安全专业（架构师/工程师用）。三者目标人群完全不同。

⚠️

**不了解 SOC 2 报告结构** — 考试会考 SOC 2 报告的 5 个 Trust Service Criteria（Security/Availability/Processing Integrity/Confidentiality/Privacy），以及 Type I 和 Type II 的审计范围区别。

⚠️

**忽略共享责任模型的审计视角** — 不是"谁负责安全"而是"谁负责审计什么"。IaaS 下客户审计应用层和数据层，CSP 审计基础设施层，这个边界在 PaaS 和 SaaS 下不同。

Frequently Asked Questions

If you plan to take ISACA CCAK, start with real practice.

258 questions, chapter-by-chapter learning, mock exams, wrong-question review, and AI tutor support live in the exam page.

Go to exam prep

From $29 · 2 free chapters

Student reviews

Loading reviews…

Related certifications

ISACA CISA

其他 · 专业级
$575150 questions120 min

CCSP

其他 · 专业级
$599150 questions180 min

ISACA CISM

其他 · 专业级
$575150 questions120 min
EXAM PREP

ISACA CCAK Question Bank

Chapter-by-chapter learning + mock exams + AI tutor

258
Questions
6
Chapters
40h
Study
AI
Tutor
  • First 2 chapters free
  • Real exam format mock tests
  • AI-powered wrong answer review
  • Chapter progress tracking
From $29
Start Practice Now

Prep snapshot

Study chapters6
Practice questions258
Estimated hours40h

What is inside

  • 6 个系统化学习章节
  • 258+ 精选练习题，每题附详细解析
  • 仿真模拟考试
  • 错题本 + 智能复习，薄弱环节针对性突破
  • 学习进度可视化追踪