Passing the exam is only part of the issuer’s certification process. Candidates must follow ISC2’s current application, ethics, fee, and maintenance rules, and CC does not grant authority to test or access systems without permission.
How this credential can help
Optional foundation credential for people testing their baseline security knowledge; it should accompany systems, networking, documentation, and authorized lab evidence.
What to confirm
- Review the current CC exam outline and candidate policies.
- Study security principles in the context of authorized, defensive work.
- Schedule and pass the CC exam under ISC2 testing rules.
- Complete the issuer’s application, ethics, and ongoing maintenance steps.
Fees and how long it lasts
ISC2’s official regional pricing page listed the CC standard registration at USD 199 for the Americas and several other regions when verified. Regional currency, taxes, promotions, training, rescheduling, and cancellation charges can differ.
Maintenance and renewal are governed by ISC2’s current candidate and member policies; verify annual fees and continuing-education obligations directly with ISC2.
Topics to plan for
| Topic | Planning weight |
|---|---|
| Security principles | 20% |
| Incident response, continuity, and recovery | 20% |
| Access controls | 20% |
| Network security | 20% |
| Security operations | 20% |
PathGauge splits the time evenly here; these are not ISC2 domain weights. Use the current CC exam outline for the official percentages and task statements.