ISC2 CC Exam Pass Rate, Format & Study Guide

The ISC2 CC exam outline (version 01/2026, effective September 1, 2026) lists five domains: Security Principles (24%), Security Governance (17.3%), Identity and Access Management Concepts (20%), Networking and Cloud Security Concepts (21.3%) and Security Operations and Incident Response (17.3%). The passing score is 700 out of 1000 points, and ISC2 describes a computerized adaptive test with multiple-choice and advanced item types. ISC2 offers the exam in English, Chinese, Japanese, German and Spanish. The portal mock is a fixed 100-question set in 120 minutes and does not reproduce an adaptive test.

The CC is ISC2's entry-level credential and is aimed at people starting in cybersecurity.

Career changers, students and new IT staff preparing for the CC.

The certifying body does not publicly publish an official pass rate for this exam. Be wary of third-party sites citing a specific number here — treat any pass-rate claim you see elsewhere for this exam as unverified.

Retake rules and waiting periods are set by ISC2; check the current ISC2 retake policy before you reschedule.

The passing score is 700 out of 1000 points; a scaled score is not a percentage of correct answers, so the percent score in the portal mock is only a self-check. Format: a computer adaptive test of about 100 questions in 2 hours; the portal mock is a fixed set of 100 questions in 120 minutes. No official pass rate is available for this exam, so none is quoted here.

The ISC2 CC exam outline (version 01/2026, effective September 1, 2026) lists five domains: Security Principles (24%), Security Governance (17.3%), Identity and Access Management Concepts (20%), Networking and Cloud Security Concepts (21.3%) and Security Operations and Incident Response (17.3%). The passing score is 700 out of 1000 points, and ISC2 describes a computerized adaptive test with multiple-choice and advanced item types. ISC2 offers the exam in English, Chinese, Japanese, German and Spanish. The portal mock is a fixed 100-question set in 120 minutes and does not reproduce an adaptive test. 100 questions · 2 hours · computer adaptive (CAT) · scaled score of 700 on 1000 to pass · five domains. The passing score is 700 out of 1000 points; a scaled score is not a percentage of correct answers, so the percent score in the portal mock is only a self-check.

• Security Principles24%
• Security Governance17.3%
• Identity and Access Management (IAM) Concepts20%
• Networking and Cloud Security Concepts21.3%
• Security Operations and Incident Response17.3%

The content outline spreads questions across 5 areas: Security Principles (24.0%); Security Governance (17.3%); Identity and Access Management (IAM) Concepts (20.0%); Networking and Cloud Security Concepts (21.3%); Security Operations and Incident Response (17.3%).

ISC2 describes the CC as an entry-level credential and lists its requirements on the certification page. Read the current requirements there before you register.

ISC2 sets the exam price and may change how the CC is offered. The amounts change, so no figure is quoted here; confirm the current price on the ISC2 site.

Holding the CC involves ISC2 maintenance requirements; check the current ISC2 rules for fees and continuing education.

Start with Security Principles, then Networking and Cloud Security Concepts and Identity and Access Management, finish with governance and incident response, and take timed 100-question runs.

This guide follows the ISC2 CC exam outline (version 01/2026, effective September 1, 2026) and the ISC2 article on the updated exam, checked October 31, 2026. Check the ISC2 site for the version you will sit.