Groundwork, not a job ticket on its own
Commenters say employers do not hire on CC alone. They describe it as a cheap way to learn the basics and ISC2’s question style before SSCP or CISSP.

Validates foundational knowledge of security principles, governance, access control, network and cloud security, and security operations.
Certified in Cybersecurity (CC) is ISC2’s entry-level credential, covering security principles, governance, access control, networking, cloud security and security operations. It is aimed at people starting out and gives a broad, ISC2-backed overview of the field.
Commenters say employers do not hire on CC alone. They describe it as a cheap way to learn the basics and ISC2’s question style before SSCP or CISSP.
People who hold both say job postings and recruiters recognize Security+ far more than CC at entry level.
ISC2’s own study of CC holders found about 45% already worked in cybersecurity, with a median of six years’ experience.
CC renews every three years through continuing education and an annual fee.
All 45 credits are Group A, related to the CC domains. If you add another ISC2 certification, a single $135 annual fee covers everything you hold.
ISC2 member policies ↗Entry-level security credential more widely named by employers.
ISC2’s next step for practitioners with one year of security experience.
Course-based program with hands-on exercises for career changers.
Not for new candidates. The free program closed to new enrollments on May 20, 2026. Existing exam codes can be used until December 31, 2026; everyone else pays $199.
No. Pass the exam, agree to the ISC2 Code of Ethics and pay the first $50 annual fee.
700 out of 1,000 scaled points. The adaptive exam has 100 to 125 questions in two hours.
Security+ is more widely named in job postings. CC costs less and introduces ISC2’s exam style if you plan to take SSCP or CISSP later.
Last updated October 2026