Certified in CyberSecurity CC

• Understand fundamental cybersecurity concepts and security principles.
• Learn risk management, governance, compliance, and cybersecurity controls.
• Understand identity lifecycle management and logical access controls.
• Develop foundational knowledge of network security, network architecture, and cloud security.
• Understand data security, security operations, incident response, and asset protection.
• Learn foundational security testing concepts.
• Understand the security implications of AI across cybersecurity domains.
• Prepare for the ISC2 Certified in Cybersecurity examination.

Domain 1: Security Principles — 24%

1.1 Understand cybersecurity concepts

• Confidentiality
• Integrity
• Availability
• Authentication, Authorization, Accounting (AAA)
• Non-repudiation
• Privacy

1.2 Understand risk management concepts

• Risk management lifecycle
• Risk management processes

1.3 Understand governance concepts

• Regulations and laws
• Frameworks and guidelines
• Policies
• Standards
• Procedures

1.4 Understand cybersecurity controls

• Technical controls
• Administrative controls
• Physical controls

1.5 Maintain professional and ethical conduct

• Professional code of conduct
• Due care and due diligence
• ISC2 Code of Ethics

Domain 2: Security Governance — 17.3%

2.1 Plan Governance, Risk, and Compliance (GRC)

• Purpose
• Importance
• Frameworks and tools

2.2 Understand redundancy

• Business Continuity (BC)
• Disaster Recovery (DR)

2.3 Understand security awareness

• Organizational culture
• Security leadership
• Social engineering
• Password protection
• Phishing

2.4 Measure cybersecurity effectiveness

• Key metrics
• Key Risk Indicators (KRI)
• Dashboards
• Scorecards
• Reports

Domain 3: Identity And Access Management (IAM) Concepts — 20%

3.1 Understand identity life cycle management

• Roles definition
• Provision
• Review
• Deprovision
• Frameworks and tools

3.2 Understand logical access controls

• Principle of Least Privilege (PoLP)
• Separation of Duties (SoD)
• Access control models

Domain 4: Networking and Cloud Security Concepts — 21.3%

4.1 Understand network security

• OSI model
• TCP/IP model
• IPv4
• IPv6
• Virtual Private Network (VPN)
• Firewalls
• Ports
• Applications
• Wireless security
• Wi-Fi
• Bluetooth
• Embedded systems
• Industrial Control Systems (ICS)
• Internet of Things (IoT)

4.2 Understand network security architecture

• Network segmentation
• Firewall zones
• VLANs
• Micro-segmentation
• Defense in Depth
• Zero Trust (ZT)

4.3 Understand cloud security

• Broad network access
• Rapid elasticity
• Measured service
• On-demand self-service
• Resource pooling
• Cloud service models
• Cloud deployment models
• Shared security model
• Cloud security roles and responsibilities

Domain 5: Security Operations and Incident Response — 17.3%

5.1 Understand data security

• Data classification
• Data labeling
• Data masking
• Data sanitization
• Symmetric encryption
• Asymmetric encryption
• Hashing
• Quantum-resistant cryptography

5.2 Understand security operations

• Logging and monitoring security events
• Security event triage
• Incident use cases
• Prioritization
• Correlation
• Threat actors
• Threat actor types and motivations
• Cyber threat intelligence
• Threat frameworks

5.3 Understand Incident Response (IR)

• Data handling policy
• Incident Response Plan (IRP)
• Incident Response exercises
• Testing
• Tabletop exercises

5.4 Understand asset protection

• Asset lifecycle management
• End-of-Life (EOL) software and devices
• Configuration management
• Change management

5.5 Understand security testing

• Security readiness testing
• Blue teaming
• Purple teaming
• Red teaming
• Vulnerability scanning
• Static analysis
• Dynamic analysis
• Threat modeling
• Physical penetration testing
• Phishing
• Tailgating
• Impersonation

2 Days

Certification: ISC2 Certified in Cybersecurity (CC)

Duration: 2 hours

Format: Computerized Adaptive Testing (CAT)

Questions: 100–125 multiple-choice and advanced item types

• IT professionals.
• Career changers transitioning into cybersecurity.
• College students.
• Recent graduates.
• Individuals seeking an entry-level cybersecurity qualification.
• Board-level executives seeking foundational cybersecurity knowledge.

No formal prerequisites