← All Certifications
ISC2

ISC2 CC Certification

CC · 5 domains

Last updated: March 31, 2026

Exam Syllabus & Domains

The ISC2 CC certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 26%

Security Principles

  • 1.1 Understand the CIA triad
  • 1.2 Understand authentication
  • 1.3 Understand the risk management process
  • 1.4 Understand security controls
  • 1.5 Understand ISC2 Code of Ethics
  • 1.6 Understand governance processes
CIA TriadAuthenticationAuthorizationNon-RepudiationRisk ManagementSecurity ControlsISC2 EthicsGovernance
Domain 2 10%

Business Continuity, Disaster Recovery, and Incident Response

  • 2.1 Understand business continuity
  • 2.2 Understand disaster recovery
  • 2.3 Understand incident response
BCPDRPRTO/RPOIncident Response PlanBackup StrategiesDisaster TypesRecovery SitesCrisis Communication
Domain 3 22%

Access Controls Concepts

  • 3.1 Understand access control concepts
  • 3.2 Understand physical access controls
  • 3.3 Understand logical access controls
Physical ControlsLogical ControlsLeast PrivilegeNeed to KnowSeparation of DutiesDefense in DepthMFAAccess Reviews
Domain 4 24%

Network Security

  • 4.1 Understand computer networking
  • 4.2 Understand network threats and attacks
  • 4.3 Understand network security infrastructure
OSI ModelTCP/IPFirewallsIDS/IPSVPNNetwork SegmentationWireless SecurityPort Security
Domain 5 18%

Security Operations

  • 5.1 Understand data security
  • 5.2 Understand system hardening
  • 5.3 Understand security policies
  • 5.4 Understand security awareness training
Data HandlingSystem HardeningPatch ManagementChange ManagementSecurity PoliciesLogging/MonitoringSecurity AwarenessEncryption

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Security Principles
26%
D2 Business Continuity, Disaster Recovery, and Incident Response
10%
D3 Access Controls Concepts
22%
D4 Network Security
24%
D5 Security Operations
18%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the ISC2 CC Practice Quiz

Related Comparisons

Not sure if ISC2 CC is the right choice? Compare it with similar certifications:

CC vs Security+

Get the ISC2 CC Study Planner

Fillable PDF with 6-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your ISC2 CC certification training:

Frequently Asked Questions

What is the ISC2 CC certification?

The ISC2 CC (CC) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the ISC2 CC certification syllabus cover?

The ISC2 CC exam syllabus covers 5 domains. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for ISC2 CC?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for ISC2 CC?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.