Start Your Journey Toward a Career in Cybersecurity

The ISC2 Certified in Cybersecurity (CC) course is designed for students, beginners, career changers, IT professionals, and anyone looking to build a strong foundation in cybersecurity.

This entry-level course introduces the essential principles, practices, and technologies used to protect information systems, networks, identities, data, and digital assets. Students will learn how cybersecurity professionals identify risks, implement security controls, manage access, protect networks and cloud environments, and respond to security incidents.

The course is aligned with the current ISC2 Certified in Cybersecurity (CC) certification objectives and provides structured preparation for the certification exam.

What You Will Learn

  • Understand fundamental cybersecurity principles
  • Learn confidentiality, integrity, and availability
  • Understand risk management and security governance
  • Explore physical and logical access controls
  • Learn identity and access management fundamentals
  • Understand network security concepts and common threats
  • Explore cloud security and shared responsibility
  • Learn data security and encryption fundamentals
  • Understand security monitoring and operations
  • Learn incident response fundamentals
  • Understand business continuity and disaster recovery concepts
  • Develop security awareness and best practices
  • Prepare for the ISC2 Certified in Cybersecurity (CC) certification exam

Course Modules

Module 1 – Security Principles

  • Introduction to cybersecurity
  • Confidentiality, Integrity, and Availability (CIA)
  • Authentication and authorization
  • Accounting and non-repudiation
  • Privacy and information protection
  • Cybersecurity risk concepts
  • Risk identification, assessment, and treatment
  • Security controls
  • Technical, administrative, and physical controls
  • Security policies and procedures
  • Security standards and frameworks
  • Cybersecurity laws and regulations
  • Professional ethics and the ISC2 Code of Ethics

Module 2 – Security Governance

  • Governance, Risk, and Compliance (GRC)
  • Security policies and organizational standards
  • Risk management frameworks
  • Business Continuity (BC)
  • Disaster Recovery (DR)
  • Redundancy and resilience
  • Security awareness programs
  • Social engineering awareness
  • Phishing and password security
  • Measuring cybersecurity effectiveness
  • Key Risk Indicators (KRIs)
  • Security dashboards and reporting

Module 3 – Identity & Access Management

  • Identity lifecycle management
  • User roles and responsibilities
  • Account provisioning
  • Access reviews
  • Account deprovisioning
  • Authentication methods
  • Authorization concepts
  • Multi-Factor Authentication (MFA)
  • Principle of Least Privilege
  • Separation of Duties
  • Role-Based Access Control (RBAC)
  • Discretionary Access Control (DAC)
  • Mandatory Access Control (MAC)
  • Physical and logical access controls

Module 4 – Network & Cloud Security

  • Networking fundamentals
  • OSI and TCP/IP models
  • IPv4 and IPv6
  • Network ports and protocols
  • Wireless security
  • Virtual Private Networks (VPNs)
  • Firewalls
  • Network security threats
  • Distributed Denial-of-Service (DDoS) attacks
  • Malware and network attacks
  • Intrusion Detection Systems (IDS)
  • Intrusion Prevention Systems (IPS)
  • Network segmentation
  • VLANs and security zones
  • Defense in Depth
  • Zero Trust fundamentals
  • Internet of Things (IoT) security
  • Cloud computing fundamentals
  • IaaS, PaaS, and SaaS
  • Public, private, and hybrid cloud
  • Cloud security responsibilities

Module 5 – Security Operations & Incident Response

  • Data security fundamentals
  • Data classification and handling
  • Data retention and destruction
  • Encryption fundamentals
  • Symmetric and asymmetric encryption
  • Hashing
  • Security logging and monitoring
  • Security event analysis
  • Threat actors and motivations
  • Cyber threat intelligence
  • Security operations fundamentals
  • Asset protection
  • Configuration and change management
  • System hardening
  • Security updates and patch management
  • Incident response fundamentals
  • Incident response planning
  • Security testing
  • Vulnerability scanning
  • Threat modeling
  • Red Team, Blue Team, and Purple Team concepts
  • Security awareness and incident prevention

Who Should Take This Course?

This course is ideal for:

  • Students interested in cybersecurity
  • Beginners entering the cybersecurity field
  • College students and recent graduates
  • IT professionals expanding their security knowledge
  • Help desk and technical support professionals
  • Network and system administrators
  • Career changers moving into cybersecurity
  • Professionals looking for an entry-level cybersecurity certification
  • Individuals preparing for the ISC2 CC certification

ISC2 specifically positions the CC credential for individuals entering cybersecurity, including IT professionals, career changers, college students, and recent graduates, with no work experience required.

Prerequisites

No previous cybersecurity work experience is required. The course is designed for beginners and provides foundational knowledge needed to start developing cybersecurity skills.

Basic computer and technology knowledge is recommended but not required.

Course Benefits

By completing this course, students will develop a foundational understanding of cybersecurity and learn how organizations protect their systems, networks, users, data, and digital assets.

Students will gain knowledge in:

  • Cybersecurity principles
  • Security governance and risk management
  • Identity and access management
  • Network and cloud security
  • Data protection
  • Security operations
  • Incident response
  • Business continuity and disaster recovery
  • Security controls and best practices

The course also provides structured preparation for the ISC2 Certified in Cybersecurity (CC) certification exam.

Certification Exam Preparation

Students will receive focused preparation covering the major CC exam domains, including:

  • Security Principles
  • Security Governance
  • Identity and Access Management
  • Networking and Cloud Security
  • Security Operations and Incident Response

The current CC examination uses computerized adaptive testing (CAT), with a two-hour testing period. ISC2’s current exam outline lists 100–125 items and a passing score of 700 out of 1000.