CC

No. ISC2 states the certification is entry-level and that no work experience is required - you need only the drive to enter the field. ISC2 says the CC proves you have the foundational knowledge, skills and abilities for an entry- or junior-level cybersecurity role.

Five, according to ISC2: Domain 1, Security Principles; Domain 2, Security Governance; Domain 3, Identity and Access Management (IAM) Concepts; Domain 4, Networking and Cloud Security Concepts; and Domain 5, Security Operations and Incident Response. The full CC exam outline is published by ISC2.

ISC2 names IT professionals, career changers looking to transition into cybersecurity, and college students or recent graduates. ISC2 also describes ideal candidates as problem solvers, creative, and analytical and critical thinkers who are excited by the opportunity to learn.

For an exam-only purchase, ISC2 states the exam code must be scheduled and administered within 365 days of purchase. Bundles pair a training access period - 90 or 180 days from purchase for self-paced, or 180 days from your first live session for instructor-led - with 365 days to sit the exam.

ISC2 offers an Exam with Peace of Mind Protection option that includes two attempts in the purchase price, which ISC2 says is cheaper than two single exams; candidates have 180 days from purchase to sit both attempts in accordance with the Retake Policy. The pages reviewed do not state the waiting period between attempts, so check the ISC2 Retake Policy before rebooking.

Begin with the official CC exam outline and map its five domains against what you already know, so study time goes to your gaps. ISC2's own routes are Adaptive Learning, online self-paced training with 90- or 180-day access, and live online instructor-led training with an ISC2 Authorized Instructor. Supplement with self-study tools such as flash cards and knowledge checks.

ISC2 states the CC is accredited by ANAB to the ISO/IEC 17024 standard and approved under U.S. DoD 8140.03. ISC2 also says the certification validates foundational knowledge for employers and builds a pathway toward advanced ISC2 certifications such as the CISSP.

ISC2 markets CC as a strong foundation for an infosec career and a way to become familiar with the exam formats used in advanced ISC2 certifications like the CISSP. ISC2 also cites access to a community of professionals and CPE/learning opportunities, and reports that ISC2 members earn 35% higher salaries than non-members.

The material reviewed does not state training as a prerequisite; the only eligibility point ISC2 makes is that no work experience is required. Training is sold on its own or bundled with the exam. If you buy a bundle, watch the separate clocks: training access starts at purchase or your first live session, while the exam window runs 365 days from purchase.

Treating CC as a vocabulary quiz, skipping domains that feel unfamiliar - governance, cloud networking and incident response are frequent blind spots - and never testing recall under pressure. Because the pages reviewed do not publish a question count or time limit, practise pacing yourself across all five domains instead of drilling one weak area to the exclusion of the rest.