Get ISC2 Certified in Cybersecurity

The ISC2 Certified in Cybersecurity (CC) is an entry-level cybersecurity certification from ISC2, the same organization behind the CISSP. It covers five domains — Security Principles, Business Continuity and Incident Response, Access Controls, Network Security, and Security Operations — and requires no prior work experience. The CC is the standard launchpad credential for anyone starting a cybersecurity career.

Yes — the ISC2 CC is widely considered the strongest entry-level cybersecurity credential on the market. It’s ANAB-accredited under ISO/IEC 17024, approved for 20 work roles under DoD Directive 8140, and recognized globally by employers, government agencies, and DoD contractors. As ISC2’s official foundational credential, the CC also opens a clear progression path into the SSCP and CISSP.

No — the ISC2 CC requires zero work experience. It’s specifically built for career changers, students, IT professionals shifting into security, and complete newcomers to the field. After passing the exam, candidates earn the full certification by paying the annual maintenance fee and agreeing to the ISC2 Code of Ethics.

The ISC2 CC and CompTIA Security+ are both entry-level cybersecurity certifications, but they emphasize different angles. The CC focuses on foundational security concepts and managerial principles, while Security+ is more technical and hands-on. Security+ is required for many U.S. DoD technical roles, while the CC is approved for 20 DoD 8140 work roles and provides a direct pathway into the ISC2 family (SSCP, CISSP, CCSP). Many professionals earn both for maximum hiring flexibility.

The ISC2 CC is a moderate-difficulty entry-level exam, easier than the CISSP or SSCP, but still scenario-based rather than pure memorization. Questions test how you would apply foundational security concepts in real situations. Three focused days of instruction is enough ground if you arrive with basic IT familiarity. The parts that reliably trip people up are the access control models and the incident response terminology, and both get drilled in class rather than left to your own reading.

The ISC2 CC exam is a Computerized Adaptive Test delivered at Pearson VUE testing centers worldwide. You have two hours to answer 100 to 125 items, a mix of multiple choice and advanced item types, and you need a scaled score of 700 out of 1000 to pass. Under the outline effective September 1, 2026, the five domains are weighted as follows: Security Principles (24%), Networking and Cloud Security Concepts (21.3%), Identity and Access Management Concepts (20%), Security Governance (17.3%), and Security Operations and Incident Response (17.3%). The exam is offered in English, Chinese, German, Japanese, and Spanish.

Yes — the ISC2 Certified in Cybersecurity is approved under DoD Directive 8140 and aligns to 20 work roles in the DoD Cyber Workforce Qualification Provider Marketplace. It satisfies foundational qualification requirements across IT (Cyberspace), Cybersecurity, and Cyberspace Enablers workforce elements, making it a valid credential for DoD civilian, military, and contractor positions.

The ISC2 CC opens entry-level cybersecurity roles including SOC analyst, junior cybersecurity analyst, security operations technician, IT support with security responsibilities, junior penetration tester, and entry-level GRC analyst. Thanks to DoD 8140 alignment across 20 work roles, the CC also qualifies candidates for federal and defense contractor positions for those pursuing government cyber careers.

Entry-level cybersecurity roles in the United States generally run from about $60,000 to $85,000, with some sources putting analyst-titled entry positions closer to $90,000. The spread is wide because region, clearance, industry, and whatever IT experience you arrive with all move the number more than the certification does. What the CC does is clear the filter that screens out candidates holding no credential at all, which is the harder barrier early in a career.

Training Camp’s ISC2 CC boot camp includes a free retake. If you do not pass on the first attempt, you return for another full boot camp at no additional cost. Per ISC2’s policy, candidates may retake the CC exam after a 30-day waiting period.

The Training Camp ISC2 CC boot camp runs three days and twenty-four hours of instruction, matching the expanded official course ISC2 put in place on September 1, 2026. On-site Pearson VUE testing is available the same week, so you can sit the exam within days of finishing class while the material is still fresh.

The natural ISC2 progression from the CC is the SSCP (Systems Security Certified Practitioner) for technical depth, followed by the CISSP once you have five years of qualifying experience. Many CC holders also stack CompTIA Security+ early in their careers, then specialize with credentials like CCSP (cloud security), CySA+ (cybersecurity analyst), or vendor-specific tracks such as Microsoft SC-200 or AWS Security Specialty.