Skip to content
Cyber KB

(ISC)² CC (Certified in Cybersecurity) - Complete Research & Study Kit

(ISC)² CC (Certified in Cybersecurity) - Complete Research & Study Kit

Section titled “(ISC)² CC (Certified in Cybersecurity) - Complete Research & Study Kit”

Status (Aug 2026): CC is the entry-level (ISC)² credential. The exam moved to CAT (Computerized Adaptive Testing) on 1 Oct 2025 - 100-125 items, 2 hours, 700/1000 to pass, no item review, 25 unscored pretest items in the first 100. Pass strategy: Read these docs + the 99-* cramming files the night before. Use the static website/ for visual review.

Folder Structure

Section titled “Folder Structure”
C:\Project\isc2\cc\
├── README.md                         ← you are here
├── 00-master-strategy.md             ← the night-before study plan
├── 99-cheatsheet.md                  ← one-pager for last-mile review
├── 99-cram-notes.md                  ← domain-by-domain cram tables
│
├── research\                         ← deep-dive research (~25.5K words total)
│   ├── 00-master-strategy.md         ← 3,378 words · 4 critical updates
│   ├── 01-exam-facts.md              ← 4,455 words · 30 sources
│   ├── 02-study-resources.md         ← 3,394 words · 25 sources
│   ├── 03-strategy-failure-analysis.md ← 7,273 words · 40 sources
│   └── 04-candidate-experiences.md   ← 6,987 words · 35 sources
│
├── domains\                          ← (empty)  -  domain flashcards TBD
├── practice\                         ← (empty)  -  practice questions TBD
├── career\                           ← (empty)  -  resume/interview material TBD
│
├── website\                          ← static site (HTML + assets + build scripts)
│   ├── index.html
│   ├── cheatsheet.html
│   ├── cram-notes.html
│   ├── strategy.html
│   ├── strategy-analysis.html
│   ├── exam-facts.html
│   ├── study-resources.html
│   ├── candidate-experiences.html
│   ├── assets\styles.css
│   ├── build_site.py                 ← regenerates HTML from the markdown
│   └── check_links.py                ← link-rot scanner
│
└── cc-study-hub\                     ← Cloudflare Worker that serves the static site
    ├── wrangler.toml                 ← binds to ../website
    └── src\index.js

Quick Decision: Should You Do CC?

Section titled “Quick Decision: Should You Do CC?”

If you are in Singapore and entering cybersecurity: CC is the lowest-friction way to put an (ISC)² credential on your resume. Plan for 2-4 weeks part-time.

Choose CC if…

  • You want the cheapest (ISC)² cert (the 1MCC promo was free, otherwise US$199).
  • You need an HR-recognised credential that does not require work experience.
  • You are pivoting into cybersecurity from a non-security role.
  • You plan to stack toward CISSP / CCSP later - CC counts as a 1-year experience waiver toward CISSP.

Don’t choose CC - pick a different cert if…

  • You already hold Security+ or equivalent → skip straight to SSCP or CISSP prep.
  • You want offensive tradecraft → CEH (sibling track in this folder) or CompTIA PenTest+.
  • You need cloud-specific credibility → CCSP instead.

How To Use This Kit

Section titled “How To Use This Kit”

Phase 1 - Decide (1 day). Read 00-master-strategy.md to confirm CC is the right next step and to absorb the 3 critical format changes (CAT, no review, 25 unscored pretest).

Phase 2 - Theory sprint (2-3 weeks). Read the 5 research files in order. Drill the 5 domains per their weights: D1=26%, D4=24%, D3=22%, D5=18%, D2=10%.

Phase 3 - Cram (1 day). Use 99-cheatsheet.md + 99-cram-notes.md for last-mile memorisation. Domain 1 + 3 + 4 = 72% of the exam.

Phase 4 - Mock exam (½ day). Use the (ISC)² official practice test (Pearson VUE) or a community bank. First-pass discipline - there is no item review.

Phase 5 - Exam day. See research/01-exam-facts.md for booking, ID, and the no-review format reality.

Total Research Stats

Section titled “Total Research Stats”
Metric Value
Research files 5
Total research words ~25,487
Total sources cited ~130
Authoritative domains (ISC)², Pearson VUE, NIST, OWASP, MITRE, ISACA, SANS, Mike Chapple, Dr. Lyron Haim, Prabh Nair
Generated 2026-08-27/28, Singapore
Validity window 6-12 months (re-verify format & pricing)

Sources of Truth (Bookmark These)

Section titled “Sources of Truth (Bookmark These)”
  • (ISC)² CC program page: https://www.isc2.org/certifications/cc
  • (ISC)² CC Candidate Handbook (latest revision)
  • Pearson VUE (ISC)² CC scheduling: https://home.pearsonvue.com/isc2
  • NIST SP 800-53 Rev. 5 (control catalog)
  • NIST SP 800-61 Rev. 2 (incident handling)
  • NIST CSF 2.0 (2024)
  • OWASP Top 10 (2021) + 2025 draft
  • MITRE ATT&CK Enterprise (latest)
  • ISO/IEC 27001:2022 + ISO/IEC 27002:2022
  • Mike Chapple, (ISC)² CISSP/CC official study resources (LinkedIn Learning, Pluralsight)

Maintenance

Section titled “Maintenance”

This kit is dated August 2026. (ISC)² updated the CC exam format to CAT on 1 Oct 2025 - most public “100 MCQ” guides predate this and are stale. Re-verify before exam booking:

  • CAT status still in effect (or another format change)
  • Item count and time limit
  • Passing score (currently 700/1000 scaled)
  • Pretest item policy (currently 25 of the first 100)
  • Pearson VUE delivery (in-person only - no OnVue)
  • Voucher/promo status (1MCC free offer closed 20 May 2026)