26%

of critical vulnerabilities were fully remediated in 2025, down from 38% a year earlier. Verizon Data Breach Investigations Report 2026.

Rocheston Certified Cybersecurity Engineer (RCCE) Level 1 certification

Most Critical Flaws Stay Open.

Only a quarter of critical vulnerabilities got fully fixed last year. RCCE Level 1 trains you to find, exploit and close those gaps, in a course that is 95% hands-on.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

RCCE Level 1

Course

5 days

Course fee

RM6,500

Exam fee

Included

Next intake

8 Feb 2027

Version note: Rocheston plans to replace the RCCE Level 1 exam with a new ANSI-accredited RCCE exam. Certificates already issued stay valid for the period shown on them, and this page will be updated when the new exam launches.

Quick answer

What is RCCE Level 1?

The Rocheston Certified Cybersecurity Engineer (RCCE) Level 1 is a hands-on cybersecurity engineering certification. Across 26 modules it covers attack techniques from web and wireless hacking to malware analysis, plus defence, cloud, zero trust and governance, with AI and machine learning built in. You sit a 90-question exam on the final day, and the certification is valid for two years.

Exam facts verified against rocheston.com on 23 Oct 2026

FOR

IT and network professionals moving into hands-on security

ROLES

Cybersecurity engineer, security analyst, penetration testing associate

SKIP IF

Networking and servers are new to you. Start with Rocheston RCCS or CompTIA Security+

01

The Credential

What you study, practise and sit to earn it.

Pass the RCCE Level 1 exam on the last day of the course and you hold the Rocheston Certified Cybersecurity Engineer credential. It is also the prerequisite for RCCE Level 2.

COURSE

5 days, 26 modules

HANDS-ON

95% labs, 1.5 TB+ of tools

EXAM

90 questions, final day

CREDENTIAL

Rocheston RCCE

Awarded by

Rocheston

Exam

ANAB accredited, on the final day

Pass mark

70%

Validity

2 years

Lab platform

Rocheston Rose Cybersecurity OS, in the browser

Leads to

RCCE Level 2

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

A hands-on tour of attack, defence and emerging tech

→

RCCE Level 1

26 modules, 95% labs, AI built in

The ethical hacking credential employers list by name

→

CEH v13

Broad attack techniques with 221 labs

A vendor-neutral pen testing credential

→

CompTIA PenTest+

Full engagement, from scoping to the report

Cyber awareness for non-technical staff

→

Rocheston RCCS

Practical awareness for every employee

Technical background needed. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with Rocheston RCCS or CompTIA Security+.

03

What the Exam Covers

One exam on the final day, across the 26 course modules.

90 multiple-choice questionsPass mark: 70%

Offence

Attack

  • Reconnaissance, vulnerabilities and web application attacks
  • Web shells, backdoors, DoS and wireless hacking
  • Hacking frameworks and Android hacking

Detection

Defend

  • Logs, network analysers, firewalls and IDS
  • Identity and access management and cryptography
  • Malware analysis and patch management

Strategy

Govern and Adapt

  • Policies, governance, risk assessment and risk management
  • Incident response and recovery
  • Cloud, DevSecOps, zero trust, IoT, blockchain and quantum

Source: Rocheston RCCE Level 1 course page and certification exam versions page. Rocheston does not publish domain weightings.

04

What the Course Covers

26 modules in five themes, 95% hands-on.

Five days, 9am to 5pm, on Rocheston’s official RCCE Level 1 course. Labs run in the cloud on Rocheston Rose Cybersecurity OS, so there is nothing to install, and AI and machine learning run through the modules.

3 modules

Threats and Recon

  • Cybersecurity Threats, Attacks and Defences
  • Reconnaissance, ML and Artificial Intelligence
  • Cyber Vulnerabilities

6 modules

Hacking Techniques

  • Web Application Attacks
  • Web Shells, Spyware and Backdoors
  • Denial of Service Attacks
  • Wireless Hacking
  • Hacking Frameworks
  • Android Hacking

5 modules

Defence and Analysis

  • Log Management and Network Analysers
  • Identity and Access Management
  • Firewalls and IDS
  • Cryptography
  • Malware Analysis

7 modules

Emerging Technology

  • Cybersecurity Test Plan for IoT Devices
  • Virtualisation with QEMU and Private Cloud
  • Blockchain and Cryptocurrency
  • Quantum Computing
  • Cloud Security
  • DevSecOps
  • Zero-Trust Architecture

5 modules

Governance and Response

  • Cybersecurity Policies and Governance
  • Risk Assessment
  • Risk Management
  • Incident Response and Recovery Plan
  • Patch Management

95%

of the course is hands-on labs, on Rocheston Rose Cybersecurity OS with more than 1.5 TB of resources. Tools include:

MetasploitNessusNmapWiresharkSplunkSQLmapHashcatSnortSuricataYARA

05

Why Now

How slowly flaws get fixed, what is hitting Malaysia, and why train with us.

26%

of critical vulnerabilities were fully remediated in 2025, down from 38% a year earlier

Verizon Data Breach Investigations Report 2026

43 days

median time to fully fix a critical vulnerability, up from 32 days

Verizon Data Breach Investigations Report 2026

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Engineers who can find and close the gaps keep their organisations off that clock.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Rocheston Authorized Training Partner

Delivering Rocheston’s official RCCE Level 1 course

Exam included

Sit your exam on the final day

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Five-day courseIncluded

RCCE Level 1 examIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM6,500

Dates

Where

Fee

Mon 8 to Fri 12 Feb 2027

Kuala Lumpur or online

RM6,500 incl. exam

Mon 26 to Fri 30 Apr 2027

Kuala Lumpur or online

RM6,500 incl. exam

Mon 21 to Fri 25 Jun 2027

Kuala Lumpur or online

RM6,500 incl. exam

Mon 16 to Fri 20 Aug 2027

Kuala Lumpur or online

RM6,500 incl. exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Rocheston Certified Cybersecurity Engineer (RCCE) Level 1

Questions

90, multiple choice

Passing score

70%

When

Final day of the course

Accreditation

ANAB accredited exam

Validity

2 years

Next version

RCCE (ANSI): 100 questions, 120 minutes, 62% pass

Exam fee

Included in the course fee

VALID FOR

Two years

Rocheston awards the RCCE certificate and badge for two years. Certificates already issued stay valid for the period shown on them.

NEXT STEP

Go to Level 2

RCCE Level 1 is the prerequisite for Rocheston’s advanced RCCE Level 2 programme.

FAQ

Questions People Ask

What is RCCE Level 1?

The Rocheston Certified Cybersecurity Engineer (RCCE) Level 1 is a hands-on cybersecurity engineering certification covering attack techniques, defence, emerging technology and governance across 26 modules.

At Trainocate Malaysia the five-day RCCE Level 1 course is RM6,500 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

You sit it on the final day of the course: 90 multiple-choice questions, and you need 70% to pass. Rocheston describes the exam as ANAB accredited.

Yes. Rocheston will discontinue the Level 1 exam when it releases a new ANSI-accredited RCCE exam with 100 questions in 120 minutes and a 62% pass mark. Certificates already issued stay valid for their stated period.

Rocheston expects an understanding of server administration, HTML and web technologies, TCP/IP and network management. If you are not there yet, Rocheston offers complimentary CyberTech Professional (RCT) training.

Rocheston says the course is 95% hands-on labs. They run in the cloud on Rocheston Rose Cybersecurity OS, with tools such as Metasploit, Nessus, Nmap, Wireshark and Splunk.

Two years. RCCE Level 1 is also the prerequisite for RCCE Level 2.

Get Hands-On With Real Attacks

Pick an intake. An advisor confirms fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 8 to 12 Feb 2027
  • RM6,500, exam included

Sources

  1. Rocheston: RCCE Level 1
  2. Rocheston: Certification exam versions
  3. Verizon: 2026 DBIR executive summary (PDF)
  4. Trainocate: RCCE1 course page
  5. CyberSecurity Malaysia: Q1 2026 Cyber Incident Summary Report
  6. NACSA: Cyber Security Act 2024 (Act 854)
  7. MAICSA: Act 854 regulations summary