ISC2 CC
CC
1Security Principles
24%
2Security Governance
17.3%
3Identity and Access Management Concepts
20%
4Networking and Cloud Security Concepts
21.3%
5Security Operations and Incident Response
17.3%
Certification comparison
ISC2 CC vs Security+
Both are entry-level security certifications. ISC2’s Certified in Cybersecurity (CC) is the gentler start and expects no experience. Security+ covers more ground, goes deeper and adds hands-on questions.
Last updated
Side by side
The two exams at a glance
Every figure comes from the vendor’s own pages, through our exam guides, and is checked every week.
| ISC2 Certified in Cybersecurity | CompTIA Security+ | |
|---|---|---|
| Vendor | ISC2 | CompTIA |
| Exam code | CC | SY0-801, SY0-701 |
| Level | BeginnerISC2 calls it Entry | Intermediate |
| Written for | Security analyst or engineer | Security analyst or engineer |
| Questions | 100–125 | Up to 90 |
| Time | 2 hours | 90 min |
| Passing score | 700 / 1000 | 750 / 900 |
| Exam cost | $199Standard registration in the Americas; set by region | Varies by countryCompTIA shows the price for your country before you pay |
| Experience | None, ISC2’s entry-level certificationExperience required | Network+ and 2 years in security administrationRecommended experience |
| Renewal | Every 3 years: 45 CPE credits | Every 3 years: 50 CEUs |
| Exam outline | 5 domainsLargest: Security Principles (24%) | 5 domainsLargest: Security Operations (27%) |
| What’s changing | No change announced | SY0-801 launches on November 17, 2026. SY0-701 retires on June 11, 2027 |
Levels are our own rating, from the level each vendor gives its exam. How we check our facts
Exam domains
What each exam covers
Each domain’s share of the exam, as the vendor publishes it. Where one exam has two versions on sale, this is the newer one.
Security+
SY0-801 · From November 17, 2026
1General Security Concepts
16%
2Threats, Vulnerabilities and Attacks
24%
3Security Architecture
19%
4Security Operations
27%
5Security Program Management and Oversight
14%
Which one
Which should you take?
Choose ISC2 CC if
you’re new to IT or security and want a first credential to confirm the field is for you.
Choose Security+ if
you have some IT experience and want the baseline certification for a hands-on security role.
Which one first?
If you take both, CC first: it introduces the ideas Security+ builds on. With IT experience behind you, you can skip CC and go straight to Security+.
Beyond the numbers
What really differs
How deep they go
CC checks that you understand the core ideas of security. Security+ expects you to apply them: to choose controls, read the signs of an attack and respond to an incident.
Question types
CC is multiple choice throughout. Security+ adds performance-based questions, where you solve a problem in a simulated environment.
What comes after
CC leads into ISC2’s own path, toward SSCP and later CISSP. Security+ leads into CompTIA’s, toward CySA+ and PenTest+. Either can lead to the other’s path.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Should I take ISC2 CC or Security+ first?
If you take both, CC first: it introduces the ideas Security+ builds on. With IT experience behind you, you can skip CC and go straight to Security+.
Which is harder, ISC2 CC or Security+?
Security+. We rate Security+ intermediate and ISC2 CC beginner, going by the level each vendor gives its exam and the experience it expects.
What experience do I need for ISC2 CC and Security+?
ISC2 CC: ISC2 sets no experience requirement for CC. Knowing the exam’s domains well is what counts. Security+: CompTIA recommends Network+ and 2 years in security administration. It isn’t required to sit the exam.
Which costs more, ISC2 CC or Security+?
ISC2 CC: $199 (standard registration in the Americas; set by region). Check ISC2’s site for the price in your country. Security+: Varies by country. CompTIA shows the price for your country before you pay.
