Current CC Exam Facts

The ISC2 Certified in Cybersecurity exam is an entry-level cybersecurity certification exam, but entry-level does not mean vocabulary-only. The exam expects a beginner to recognize security goals, choose reasonable first actions, and avoid risky shortcuts. A good CC candidate can explain why confidentiality, integrity, availability, access control, response, and operations matter in ordinary workplace scenarios.

As of this guide update, the current CC exam outline is effective October 1, 2025. ISC2 has also posted notice that a new outline becomes effective September 1, 2026. That matters for scheduling. If you are preparing before September 1, 2026, study against the October 1, 2025 outline unless ISC2 updates your registration materials. If your exam date is on or after September 1, 2026, confirm which outline applies before you lock your final review plan.

Do not convert the passing grade into a raw 70% target. A scaled score of 700 out of 1000 is not the same thing as answering exactly 70% of questions correctly. Adaptive delivery, item difficulty, and scoring rules make that conversion unreliable. Your goal is to consistently make the right beginner-level security decision under time pressure, not to chase a guessed raw percentage.

The CC exam is also not a pass-rate game. You may see informal claims about how many people pass, but ISC2 does not need you to know a public pass rate to prepare. Your preparation should be based on the official domains, your missed-question patterns, and your ability to explain choices in practical language.

Public 1MCC Enrollment Cutoff

ISC2 announced on April 22, 2026, that public enrollment in the One Million Certified in Cybersecurity program, often written as 1MCC, ends May 20, 2026. The important scheduling detail is that unexpired 1MCC codes may still be used to schedule and take the exam by December 31, 2026. If you already have a code, treat it like an expiring resource. Verify the expiration shown in your account, schedule early enough to handle testing center availability, and leave room for administrative problems.

Scenario: Choosing a Date

Imagine a candidate who starts studying on May 1, 2026, has a valid 1MCC code, and wants to test in late August. That plan fits the current outline window and leaves time before the announced September 1 outline change. A different candidate who starts in July and wants a November test date should confirm the outline transition and code rules before building a final plan. The issue is not whether cybersecurity concepts disappear; the issue is that domain wording and emphasis can change, and your final review should match the exam you will actually sit for.

Use official facts as guardrails. Build your study plan around dates, domain weights, and the real exam format. Avoid shortcuts based on hearsay, especially pass-rate claims or claims that a scaled 700 equals a simple 70%.