What Is the CC Certification?
The Certified in Cybersecurity (CC) is an entry-level cybersecurity certification issued by (ISC)². It is designed for people who want to break into the cybersecurity field — no prior work experience is required. The CC validates foundational knowledge across five core security domains and demonstrates to employers that you understand basic security principles, access controls, network security, and incident response.
Exam Format & Pattern
Prerequisites & Eligibility
One of the biggest advantages of the CC is that there are zero prerequisites. No work experience, no degree, no prior certification is required to sit for the exam. This makes it genuinely accessible to career changers, students, and anyone entering the cybersecurity field for the first time.
Exam Cost & Registration
The exam fee is $249 USD for non-members. (ISC)² members pay a reduced rate. Registration is done through Pearson VUE directly. You can purchase the exam voucher first and book the date separately — you are not forced to commit to a date before you are ready.
After You Pass
Once you pass, you become an Associate of (ISC)² while working toward fulfilling the full CISSP experience requirements — or you hold the CC as a standalone credential. The certification is valid for 3 years and requires annual renewal through CPE credits and an Annual Maintenance Fee.
- CPEs required per year: 15
- Total CPEs over the 3-year cycle: 45
- Annual Maintenance Fee (AMF): $50/year
Domain Weightage
The CC exam covers five domains. Understanding the weightage helps you prioritize your study time. Domains 1 and 4 together make up 50% of the exam — weight your study effort accordingly.
Exam Strategy Tips
- Don't rush. You have 2 hours for 100 questions — that's over a minute per question. Use it. Read each question fully before looking at the answer choices.
- Watch for absolutes. Words like "always," "never," "only," and "must" in answer choices are often red flags. Security rarely works in absolutes.
- Think like a manager, not a technician. When in doubt, pick the answer that prioritizes risk management and policy over technical implementation.
- The CIA Triad is everywhere. Many questions will not mention CIA explicitly, but the correct answer will almost always be traceable back to preserving Confidentiality, Integrity, or Availability.
- Process of elimination works. Even if you don't know the right answer, you can often identify two wrong ones and improve your odds significantly.