ISC2 CC: who it helps, the new exam and what it costs now the free exam is gone

By Alexander Shick · Updated November 5, 2026

CC or Security+?

ISC2 says CC proves the foundational knowledge, skills and abilities for an entry- or junior-level cybersecurity role, and it names IT professionals, career changers and college students or recent graduates as its audience. It requires no work experience, so it shows you know the basics rather than that you have done security work.

Both are entry points into security, from different issuers: CC comes from ISC2 and Security+ from CompTIA. CC costs less than CompTIA Security+ and needs no experience.

The free CC program has ended

ISC2's One Million Certified in Cybersecurity program, which offered free training and a free exam, stopped taking new enrollments on May 20, 2026. Codes already issued must be used by December 31, 2026, and ISC2 says no new free exam seats will be issued. Many older guides still describe CC as free; for new candidates it now costs at least $199.

The new outline and format

A new exam outline took effect September 1, 2026. The adaptive exam has 100 to 125 items in two hours, and you need 700 out of 1,000. ISC2 weights five areas:

Ways to prepare for CC

CC is an entry-level exam, so free study material and the $199 exam are enough for most career starters. ISC2's official self-paced training comes with 90 or 180 days of access from the date of purchase and a set order to work through, and its online instructor-led class or Learning Tree's three-day virtual class adds a live instructor. Whatever you use, check it was written for the outline that took effect September 1, 2026.

Costs compared

ISC2's self-paced course costs $255 on its own ($230 if you are already registered as a candidate, $204 for members), so at the regular price the $454 bundle costs the same as buying the course and the exam separately; registered candidates paying $230 for the course come out $25 ahead by buying separately.

What to confirm before buying CC training

• Which outline it covers. The current outline took effect September 1, 2026, with five weighted areas; older material describes the previous one.
• Whether the exam is included. ISC2's self-paced bundle and Learning Tree's class include it; ISC2's online instructor-led class does not state that it does.
• Whether a second attempt is covered. Learning Tree includes a retake, and ISC2's Peace of Mind option adds a second attempt, with both attempts taken within 180 days of purchase.
• How long access lasts. ISC2 sells its self-paced training with 90-day or 180-day access, both counted from the date of purchase; the $454 bundle in the table is the 90-day option.

Keeping CC

After passing, you pay ISC2 a $50 annual maintenance fee. You also earn 45 continuing professional education (CPE) credits over each three-year cycle, all of them Group A (activities tied to the CC domains); ISC2 suggests about 15 a year but sets no annual minimum. When both are met, ISC2 renews CC automatically for another three years.

Using CC for new IT hires

CC is an inexpensive way to give new IT or support hires a security baseline. For a group, ISC2's self-paced bundle at $454 per person is its lowest-cost official training option; ISC2 also has a team-training page for group pricing.

Short answers

Is ISC2 CC still free?

No. The free program closed to new enrollments on May 20, 2026; the exam now costs $199.

How long is the CC exam?

Two hours, with 100 to 125 adaptive items.

Do I need experience for ISC2 CC?

No work experience is required.

What does CC cost each year?

A $50 annual maintenance fee after you pass, plus 45 Group A CPE credits over each three-year cycle (about 15 a year).

Next step

Ask for help choosing ISC2 CC training