37%

of hiring managers want the ISC2 CC in entry-level hires, and 39% for junior roles. ISC2, 2025.

ISC2 Certified in Cybersecurity (CC) certification

Hiring Managers Want to See This.

You don’t need years in IT to get noticed. You need the credential employers are asking for, from the body behind CISSP.

HRD Corp claimableYayasan Peneraju: may be eligibleNo experience needed

Exam

ISC2 CC

Course

3 days

Course fee

RM5,500

Exam fee

Included

Next intake

14 Dec 2026

Quick answer

What is ISC2 Certified in Cybersecurity (CC)?

ISC2 Certified in Cybersecurity (CC) is ISC2’s entry-level certification for people starting out in cybersecurity. It proves you understand security principles, governance, access control, network and cloud security, and security operations. There are no experience requirements, and the exam runs for two hours.

Exam facts verified against isc2.org on 22 Oct 2026

FOR

Students, fresh graduates, career switchers and staff in audit, risk or management

ROLES

SOC analyst, incident responder, risk and compliance analyst

SKIP IF

You already work in IT security. Look at Security+ or SSCP

01

The Credential

What you study, practise and sit to earn it.

Pass the ISC2 CC exam and you hold your first ISC2 certification. You join the same professional body as CISSP holders, with the same code of ethics and continuing education.

COURSE

3 days, 5 modules

OUTLINE

Sep 2026 version, with AI topics

EXAM

2 hrs, 100 to 125 items

CREDENTIAL

ISC2 CC

Awarded by

ISC2

Level

Entry level

Prerequisites

None, no work experience needed

Cycle

3 years, 45 CPE credits

Annual fee

US$50

Recognition

ANAB ISO/IEC 17024, DoD 8140 approved

02

Decide in 60 Seconds

Four first certifications people compare.

If you want to

Choose

Why

Prove security fundamentals with no IT experience

→

ISC2 CC

Entry-level credential from the body behind CISSP

Try defence, hacking and forensics in labs

→

EC-Council Certified Security Specialist

One beginner exam across three disciplines

A deeper vendor-neutral baseline for IT staff

→

CompTIA Security+

Core security skills that apply to any vendor’s tools

Work in a SOC on Cisco-heavy networks

→

CCNA Cybersecurity

Focused on monitoring, analysis and incident response

Is ISC2 CC your starting point?
0/4

Tick what applies. 3 or 4: ISC2 CC is a strong first step. Fewer: with IT experience, Security+ or SSCP may suit you better.

03

What the Exam Covers

Five domains from ISC2’s CC exam outline, effective 1 Sep 2026. Bars to scale.

5 domainsLargest: Security Principles, 24%New outline from 1 Sep 2026

Security Principles 24%
Networking and Cloud Security Concepts 21%
Identity and Access Management (IAM) Concepts 20%
Security Governance 17%
Security Operations and Incident Response 17%

Source: ISC2 Certified in Cybersecurity Exam Outline, effective 1 Sep 2026.

04

What the Course Covers

Five modules that mirror the five exam domains.

Three days of instructor-led ISC2 Official Training aligned to the September 2026 outline. Each module maps to one exam domain, so you study exactly what the exam weighs.

5 topics

Security Principles

  • Confidentiality, integrity, availability, AAA and privacy
  • Risk management lifecycle
  • Governance: laws, frameworks and policies
  • Technical, administrative and physical controls
  • Professional conduct and the ISC2 Code of Ethics

4 topics

Security Governance

  • Governance, risk and compliance frameworks
  • Business continuity and disaster recovery
  • Security awareness: phishing and social engineering
  • Measuring effectiveness with KRIs and dashboards

3 topics

Identity and Access Management

  • Identity lifecycle: provision, review, deprovision
  • Least privilege and separation of duties
  • Access control models

4 topics

Network and Cloud Security

  • OSI, TCP/IP, IPv4 and IPv6, VPNs and firewalls
  • Wireless, IoT and embedded systems
  • Segmentation, defence in depth and Zero Trust
  • Cloud service models and shared responsibility

6 topics

Security Operations and Incident Response

  • Data handling and encryption
  • Logging, monitoring and event triage
  • Threat actors and threat intelligence
  • Incident response plans and tabletop exercises
  • Asset, configuration and change management
  • Red, blue and purple teaming

AI

The September 2026 outline builds AI security into all five domains, from model poisoning to AI-driven phishing.

05

Why Now

What employers want, what certification does for careers, and why train with us.

37%

of hiring managers want the ISC2 CC in entry-level hires, and 39% for junior-level roles

ISC2 Cybersecurity Hiring Trends, 2025

67%

of certified professionals call vendor-neutral certifications a very impactful career accelerator

ISC2 The Value of Cybersecurity Certifications, 2026

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Each of those duties needs people who know the fundamentals.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

ISC2 Official Training Preferred Partner

Delivering ISC2’s official CC training

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Three-day courseIncluded

ISC2 CC examIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM5,500

Dates

Where

Fee

14 to 16 Dec 2026

Kuala Lumpur or online

RM5,500 incl. exam

19 to 21 Jan 2027

Kuala Lumpur or online

RM5,500 incl. exam

3 to 5 Feb 2027

Kuala Lumpur or online

RM5,500 incl. exam

1 to 3 Mar 2027

Kuala Lumpur or online

RM5,500 incl. exam

28 to 30 Apr 2027

Kuala Lumpur or online

RM5,500 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

ISC2 Certified in Cybersecurity (CC)

Exam format

Computerized Adaptive Testing (CAT)

Items

100 to 125, multiple choice and advanced item types

Duration

2 hours

Passing grade

700 out of 1000

Languages

English, Chinese, Japanese, German, Spanish

Testing centre

Pearson VUE

Outline in force

From 1 Sep 2026

KEEP IT ACTIVE

Earn 45 CPE credits

Earn 45 Group A continuing professional education credits over each three-year cycle. ISC2 suggests about 15 a year.

ANNUAL FEE

US$50 a year

CC holders pay ISC2 an annual maintenance fee of US$50 while they hold the certification.

FAQ

Questions People Ask

What is ISC2 Certified in Cybersecurity (CC)?

ISC2 CC is ISC2’s entry-level cybersecurity certification. It proves you understand security principles, governance, access control, network and cloud security, and security operations, and it needs no work experience.

No. ISC2 designed CC for newcomers, including people entering cybersecurity without direct IT experience. There are no prerequisites.

At Trainocate Malaysia the three-day course is RM5,500 per person, and the exam is included. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

No longer for new candidates. ISC2 closed new enrolments in its One Million Certified in Cybersecurity programme on 20 May 2026, and existing free exam codes must be used by 31 Dec 2026. The exam is included in Trainocate’s course fee.

ISC2 introduced a new exam outline on 1 Sep 2026. The five domains are now Security Principles, Security Governance, IAM Concepts, Networking and Cloud Security Concepts, and Security Operations and Incident Response, with AI security built into each one.

Earn 45 continuing professional education credits over each three-year cycle and pay ISC2’s annual maintenance fee of US$50.

Most people build experience and move to SSCP, which needs one year in the field, then CISSP, which needs five. If you pass before you have the experience, you become an Associate of ISC2.

Your First Credential Starts Here

Pick an intake. An advisor confirms your seat, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 14 to 16 Dec 2026
  • RM5,500, exam included

Sources

  1. ISC2: Certified in Cybersecurity (CC)
  2. ISC2: CC exam outline, effective 1 Sep 2026
  3. ISC2: Annual maintenance fees
  4. ISC2: Member policies (CPE)
  5. ISC2: One Million Certified in Cybersecurity
  6. ISC2: SSCP exam outline
  7. ISC2: CISSP exam outline
  8. ISC2: CCSP exam outline
  9. ISC2: Why CC is the smart choice for entry- and junior-level hiring
  10. ISC2: Who earns the CC certification
  11. ISC2 Research: The Value of Cybersecurity Certifications
  12. Trainocate: CC course outline
  13. CyberSecurity Malaysia: Q1 2026 Cyber Incident Summary Report
  14. ISC2: 2025 Cybersecurity Workforce Study
  15. Cisco 2025 Cybersecurity Readiness Index, Malaysia findings (via Cybersecurity Asia)
  16. NACSA: Cyber Security Act 2024 (Act 854)
  17. MAICSA: Act 854 regulations summary