Certification details change. Always confirm final pricing, availability, and credential terms on the official provider page linked in the sources below before you pay for anything.
◆
A foundational starting point — use the vendor’s audience to decide fit.
The call: Take it if ISC2's audience and recommended background below describe where you are, and you want a foundational check of the published domains. Skip or compare it if you already do the tested work or your target requires hands-on or professional-level proof beyond a foundational exam.
ISC2 positions CC - Certified in Cybersecurity as a foundational exam. Use the objective domains below as a study outline, then pair the credential with hands-on evidence aligned to the work you want; the credential does not establish job readiness by itself. Vendor-recommended experience · checked
Who this certification is designed for
The vendor’s stated audience, plus an honest fit for your starting point. No pass rates, no guarantees.
General funding research checklist: vouchers, WIOA, Workforce Pell, GI Bill, and employer education assistance may be worth checking. This list is not evidence that this credential, exam, or provider qualifies; confirm eligibility with the official program before relying on funding. Compare funding options →
What ISC2 asks for
Entry stage. RoleMath groups this with credentials that assume no prior experience. ISC2’s own wording is below, and it is the one to go by.
Recommended background:No work experience required [vendor page]A recommendation, not a registration requirement.
$349Renewal method and optional preparation can change the total
We publish no ROI or payback figure for this credential. Paid training prices are not included in this credential cost view. See the full cost breakdown →
Exam at a glance
How ISC2 administers the exam — the logistics only. This is format, not a pass prediction, and it says nothing about how hard the material is for your background.
Format
Multiple choice and advanced item types
Duration
2 hours
Languages
English, Chinese, Japanese, German, Spanish
Testing provider
Pearson VUE (test centers)
Delivery
ISC2 exams are taken at Pearson VUE testing centers worldwide — there is no take-at-home option.
Online proctoring
Because ISC2 exams are taken at Pearson VUE test centers, home-proctoring setup does not apply — bring a valid government photo ID; the center provides the secured testing environment.
Policies change; verify delivery, ID, room-scan, reschedule, and refund rules on the official page before you book or pay. See exam-day logistics →
26%Security PrinciplesPlain-English orientation: use this as the topic area to study for Security Principles. The official objectives define the exact vendor tasks.ISC2 Cybersecurity Certifications (CC) · checked
24%Network SecurityPlain-English orientation: use this as the topic area to study for Network Security. The official objectives define the exact vendor tasks.ISC2 Cybersecurity Certifications (CC) · checked
22%Access Controls ConceptsPlain-English orientation: use this as the topic area to study for Access Controls Concepts. The official objectives define the exact vendor tasks.ISC2 Cybersecurity Certifications (CC) · checked
18%Security OperationsPlain-English orientation: use this as the topic area to study for Security Operations. The official objectives define the exact vendor tasks.ISC2 Cybersecurity Certifications (CC) · checked
10%Business Continuity (BC), Disaster Recovery (DR) & Incident Response ConceptsPlain-English orientation: use this as the topic area to study for Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts. The official objectives define the exact vendor tasks.ISC2 Cybersecurity Certifications (CC) · checked
Free ways to study for CC - Certified in Cybersecurity
4 free resources on record
CC Certification Exam Outline. Free · official Best use: Confirm the official scope, domains, and version before studying. Limitation: Official free CC exam outline with five domains and weights. Checked 2026-07-08.
ISC2 CC certification page and exam outline (official) Free · official Best use: Getting the exam outline and the free flash cards from the body that runs the exam. Limitation: The self-paced training course linked from this page is paid. Guidance elsewhere that the training is free predates May 2026, when the One Million Certified programme closed. Checked 2026-08-05.
Official Certified in Cybersecurity flash cards Free tier (account required) · official Best use: Drill CC terminology free now that the free course programme has closed. Limitation: Interactive terminology drills with immediate feedback, behind an ISC2 form. Recall practice only - not exam-style scenario questions. When we read ISC2's CC self-study page it offered the exam outline and these flash cards; the free CC course closed to new participants on 2026-05-20. Checked 2026-08-05.
ISC2 CC flash cards and practice quiz (official, free) Free · official Best use: Checking recall across all five domains without paying for the training course. Limitation: Recall practice, not instruction — it will not teach a domain you have not studied. Checked 2026-08-05.
Official sources control exam scope. Independent resources are reviewed for usefulness and labeled; none is a pass guarantee or affiliate recommendation.
A source-cited companion for CC - Certified in Cybersecurity: domain sequencing, free resources, hands-on labs, and concept checks. It is not official training and it does not predict a pass.
ISC2’s own framing of who earns it and what it signals, plus their free official study material. Quoted and cited — never dressed up as a job guarantee.
Who the vendor built it for
Best fit for entry-level cybersecurity learners validating foundational security principles, incident response, access controls, network security, and security operations.
Where it leads
ISC2 entry credential; no experience requirement for CC certification path.
RoleMath editorially associates this credential with the planning roles below. O*NET independently reports these titles for those roles’ occupations; O*NET does not say this credential is required or maps to them. This is not employer-demand, placement, or hiring evidence. Titles vary by employer, seniority, and location.
Source: O*NET OnLine supports the reported titles only; the credential-to-role association is RoleMath planning context.
RoleMath planning roles associated with this credential
These are RoleMath editorial associations based on skill and stage fit, not a vendor, O*NET, employer-demand, or universal-requirement claim. The sequence labels are planning context, not proof that this credential causes advancement, hiring, or placement.
The DoD lists this certification as an approved foundational qualification option for 5 cyber work roles, per the DoD 8140 qualification matrix (V2.1, effective 2025-09-19; checked 2026-08-07). These are work-role classifications, not job openings, not hiring eligibility, and not evidence that these roles are available to you.
Mapped at basic proficiency
Cyber Defense Analyst 511
Cyber Defense Infrastructure Support Specialist 521
Cyber Defense Incident Responder 531
Information Systems Security Developer 631
Information Systems Security Manager 722
This covers the foundational step only. DoD 8140 qualification has more than one part: a foundational qualification, then a resident on-the-job qualification within the role, then continuing professional development. A certification can satisfy the foundational part. It does not by itself qualify anyone for the work role.
It is also one route, not the required one. The DoD lists a qualifying degree, approved training, or a certification as alternatives to the same foundational baseline. And a certification approved at a higher proficiency level also applies at lower proficiency levels for that same work role, so the level shown above is where the matrix maps it, not a ceiling.
The matrix sets the department-wide baseline. A component, command, or contract may set stricter foundational requirements for a particular position, and environment-specific resident requirements are left to component discretion — so this cannot tell you what one specific job will ask for. Sources: the DoD 8140 qualification matrix V2.1 (XLSX) for the mappings, and DoDM 8140.03 (PDF) for the qualification lifecycle. IAT, IAM and IASAE levels belong to DoD 8570.01-M, which DoDM 8140.03 cancelled, and are not part of 8140.
Readiness check · ~2 min · no score · no email
Not sure if CC - Certified in Cybersecurity is the right next step for you?
Answer a few quick questions and we’ll map your background against the exam’s published domains and the vendor’s recommended prep — a study order and a sequencing read, not a score or a pass prediction. Everything you need to decide is already above; open this only if you want a personalized plan.
Security Principles26%
Network Security24%
Access Controls Concepts22%
Security Operations18%
Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts10%
Answer blocks
Common Questions
Is ISC2 CC worth it?
The deciding factor is your goal, budget, and where you're starting. ISC2's Certified in Cybersecurity (CC) is a genuine entry-level credential aimed at people with little or no security background, so it fits career-changers who want a recognized first step into cybersecurity. If you already work in the field or your target role names a specific credential, compare that before paying.
CC is ISC2's foundation-level, no-experience-required certification; its adaptive exam covers five domains weighted toward Security Principles (26%), Network Security (24%), and Access Controls Concepts (22%) (ISC2 CC exam outline, retrieved 2026-06-08). The published exam fee is about $199, with a minimum three-year ownership cost near $349 including renewal fees (ISC2 exam pricing, as of 2026-07-01). Note two timing facts: ISC2's "One Million Certified" free-exam program closed to new enrollment on 2026-05-20, so CC is not a free offer today; and a new CC exam outline takes effect 2026-09-01 — verify the current outline on the official page before you build a study plan. We sell no training or certs; this is planning context, not a pitch.
Citations:Exam code/domains/weights and the 2026-09-01 outline change — ISC2 CC exam outline (retrieved 2026-06-08); fee ~$199 / 3-yr ~$349 and pricing date — ISC2 exam pricing (as of 2026-07-01); free-program closure — ISC2 One Million Certified program note (closed 2026-05-20).
Not sure CC is the right first step for your background and goal? Build your free, personalized RoleMath fit plan to see where it sits in your path.
What jobs can ISC2 CC help with?
ISC2 CC can help you prepare for entry-level security roles — it does not guarantee a job. RoleMath maps it most directly toward cybersecurity-analyst and IT-security-operations work as a foundation credential. Pay varies by occupation and location, not by the cert.
CC is an entry-level credential RoleMath associates with roles like Cybersecurity Analyst and IT Security Operations Specialist (RoleMath role mapping). For occupation-level pay context only, BLS OEWS May 2025 reports a median annual wage of $129,180 for Information Security Analysts (SOC 15-1212) — an occupation median across every worker in that classification, not earnings caused by holding the certification, and entry pay is lower than the median. CC supports preparation, not placement; it signals foundational security knowledge to an employer, not job-ready experience. This is role-fit context, not a market size, demand, salary, or ROI claim.
Want to see which of these roles fits your background and location? Get your personalized RoleMath fit plan.
How long does it take to study for ISC2 CC?
RoleMath's reviewed evidence establishes no reliable universal study-duration range for CC - Certified in Cybersecurity. Plan from the official exam scope, the vendor's recommended background, and the labs you cannot yet complete without help.
Start with a scope check, practice the weak domains hands-on, and schedule only after you can explain and perform the tested work consistently. Calendar time without a measured skill gap is not a defensible readiness estimate.
Citations:Official vendor exam scope and recommended-experience source cited on this page.
Want a study sequence built around your weakest domains? Get your personalized RoleMath fit plan.
Is ISC2 CC hard?
How hard CC - Certified in Cybersecurity is depends on the background it assumes, and the vendor states that directly: No work experience required.
That is the vendor's own statement, not a RoleMath rating and not a pass rate — we found no candidate pass rate on the vendor pages we reviewed. Compare it against the exam scope the vendor publishes and your own hands-on gaps to decide what to practise.
Citations:The vendor's own statement of the experience it expects; official vendor exam scope cited on this page.
Want to know if you're ready before you book it? Get your personalized RoleMath fit plan.
What should I know before taking ISC2 CC?
CC has no experience requirement — that's the point of it. You can sit the exam as a beginner. The most useful preparation is getting comfortable with basic security and networking vocabulary across the five domains, and confirming the current exam outline, since a new one takes effect 2026-09-01.
ISC2 lists no prior-experience prerequisite for CC; it's designed as an entry point (ISC2 CC exam outline, retrieved 2026-06-08). Practically, the five concept domains — weighted to Security Principles (26%), Network Security (24%), and Access Controls Concepts (22%) — reward familiarity with core terms more than hands-on lab time. Two timing notes matter: the "One Million Certified" free-exam program closed to new enrollment on 2026-05-20, so budget the ~$199 fee; and a new exam outline is effective 2026-09-01, so verify the current domains on the official page before building a plan. We won't invent requirements ISC2 doesn't state.
Citations:No prerequisite / domains / 2026-09-01 outline change — ISC2 CC exam outline (retrieved 2026-06-08); fee ~$199 and free-program closure — ISC2 exam pricing (as of 2026-07-01) / One Million Certified program note (closed 2026-05-20).
Not sure where your gaps are? Get your personalized RoleMath fit plan to see what to shore up first.
Where to go next
These pages draw on the same sourced data, and are the closest to what you just read.
This table lists the page’s core content records and when they were checked. Claim-specific citations appear beside the relevant text and may not be repeated here.
ID
Supports
Source
Checked
CIT-01
Public official credential page for CC - Certified in Cybersecurity.