CC – Certified in Cybersecurity Training

The CC – Certified in Cybersecurity (CC) certification by (ISC)² is designed to be completely beginner-friendly, which means it has no strict prerequisites — making it a great starting point for anyone interested in cybersecurity.

🧩 Domain 1: Security Principles (26%) This domain introduces the core foundations of cybersecurity — the “why” behind protecting information. Key topics: Understanding Confidentiality, Integrity, and Availability (CIA Triad) Principles of information assurance and governance Types of security controls (administrative, physical, technical) Access control concepts (least privilege, separation of duties, defense in depth) Basic risk management and threat types (internal vs. external) Security policies, procedures, and awareness programs Importance of ethics and compliance in cybersecurity 🧭 Domain 2: Business Continuity, Disaster Recovery, and Incident Response (10%) Focuses on how organizations prepare for, respond to, and recover from incidents. Key topics: What is business continuity (BC) and disaster recovery (DR) Incident response lifecycle (Preparation → Detection → Containment → Eradication → Recovery → Lessons learned) Backup and recovery methods Creating and testing continuity plans Incident reporting and escalation procedures Roles and responsibilities in an incident response team 🔐 Domain 3: Access Control Concepts (22%) Explains how organizations manage who can access what, and how authentication works. Key topics: Identification, authentication, authorization, and accounting (AAA) Multi-Factor Authentication (MFA) and password best practices Access control models (Discretionary, Mandatory, Role-Based, Attribute-Based) User provisioning, account management, and privilege assignment Identity and access management (IAM) tools and policies Access reviews and monitoring 🌐 Domain 4: Network Security (24%) Covers the basics of networking and how to secure network infrastructure and data in transit. Key topics: Network components: routers, switches, firewalls, VPNs Network topologies and protocols: IP, TCP, UDP, DNS, DHCP Firewall configurations and types (stateful/stateless) IDS/IPS (Intrusion Detection/Prevention Systems) Encryption basics (symmetric/asymmetric, TLS, VPNs) Wireless network security (WPA3, SSID, access points) Common network attacks (DoS, MITM, phishing, sniffing) ⚙️ Domain 5: Security Operations (18%) Focuses on day-to-day cybersecurity practices and how organizations maintain secure operations. Key topics: Security monitoring and logging Patch management and vulnerability assessments Malware protection (antivirus, endpoint security, EDR tools) Change management and system hardening Data protection and handling procedures Understanding threat intelligence Basics of physical security (badges, cameras, secure areas)

The CC – Certified in Cybersecurity (CC) exam by (ISC)² is a beginner-friendly, multiple-choice certification exam designed to test your understanding of foundational cybersecurity concepts.

The CC – Certified in Cybersecurity (CC) certification by (ISC)² and Splunk certification exams (like Splunk Core Certified User or Splunk Enterprise Certified Admin) are not directly aligned — they focus on different areas of cybersecurity and IT skills.

The CC – Certified in Cybersecurity (CC) exam by (ISC)² is 2 hours long (120 minutes).