(ISC)² CC – Certified in Cybersecurity

Security teams need a common baseline before they can consistently handle access control, policy enforcement, incident response, and day-to-day security operations without creating avoidable risk. For organizations pursuing SOC 2, CMMC, or internal audit readiness, an uneven security baseline is an exposure — this training closes that gap before it becomes a finding. This foundational ISC2 CC training is suited to IT Directors at mid-market firms onboarding junior security staff, cross-training help desk or systems personnel into security responsibilities, or standardizing knowledge across newer cybersecurity practitioners. At 8–9 hours total, this course fits comfortably into a structured onboarding sprint or can be distributed across two weeks without disrupting day-to-day operations. It also prepares learners for the ISC2 CC exam, giving technology leaders managing hybrid teams a clear workforce-readiness outcome alongside certification alignment.

Teams complete this course ready to apply foundational security concepts across core ISC2 CC domains — reducing the ramp time for new hires and ensuring consistent coverage across mixed-experience cohorts.

• Security principles, governance, and risk
• Business continuity, disaster recovery, and incident response
• Access controls and foundational network security
• Security operations concepts, including logical and physical controls

This course is the right fit for entry-level hires and practitioners closing foundational gaps — not for advanced specialists already operating at a senior technical level. For change management, assign it alongside your internal policies and operational procedures so teams can connect foundational security concepts to your environment. Whether you're onboarding a cohort of five or rolling this out across a distributed team, CBT Nuggets Playlists and Team Reporting let you assign, sequence, and track completion at scale.

IT teams rely on foundational security judgment to reduce preventable mistakes, especially when newer staff begin taking on operational security work. This training maps to practical areas teams encounter every day, including policy awareness, access control decisions, system hardening, and network threat recognition.

In real-world environments, this helps teams:

• Support safer onboarding of junior cybersecurity staff — so new hires arrive with a consistent baseline on access control, acceptable use, and security ethics before they touch production systems.
• Reduce friction during incident response and continuity planning sessions by ensuring junior team members can discuss recovery objectives, escalation paths, and continuity priorities — not just the senior staff in the room.
• Reduce the risk of misconfigurations and policy drift that occur when team members apply access control, data protection, or hardening practices inconsistently — a common failure mode when staff come from varied backgrounds or self-taught paths.
• Strengthen day-to-day network security awareness so team members can recognize common threat patterns and make faster, better-informed escalation decisions without relying on a senior analyst for every call.

For IT Directors at mid-market firms and technology leaders managing hybrid teams, the value is workforce readiness and risk reduction: teams complete this training to establish a common security language before moving into tool-specific administration, advanced defense work, or higher-stakes compliance responsibilities.

Knowledge

• Security principles, including the CIA triad, authentication, non-repudiation, and privacy, and how they support foundational cybersecurity work.
• Risk management basics, including controls, ethics, and governance concepts used in security decision-making.
• Business continuity, disaster recovery, and incident response concepts at a foundational level.
• Access control principles relevant to protecting systems, data, and physical security.
• Security policy, security awareness, training, and code of ethics concepts that support organizational security practices.
• Core network security concepts, including infrastructure components, common threats, and attack vectors.
• Foundational data security and system hardening principles for on-premises and cloud environments.
• Computer networking and infrastructure basics relevant to foundational cybersecurity work.
• Foundational security operations concepts, including data handling, logging, and configuration management.

Ability

• Apply a shared vocabulary of foundational security concepts to entry-level cybersecurity operations, reducing onboarding friction for new team members.
• Recognize and discuss common security requirements related to access control, physical security, data protection, and hardening efforts.
• Contribute to team conversations about risk, governance, resilience planning, and incident response preparation.
• Identify foundational network security considerations, including infrastructure components and common threat areas.
• Use foundational security principles as a baseline for supervised security responsibilities.
• Demonstrate readiness for the (ISC)² CC certification exam, including for career changers, non-security IT staff, and practicing security professionals seeking a formal credential.
• Establish a shared knowledge baseline across new and developing team members to support more consistent security task execution.