(ISC)² CC – Certified in Cybersecurity

Security teams need a common baseline before they can consistently handle access control, policy enforcement, incident response, and day-to-day hardening work without creating avoidable risk. This foundational (ISC)² CC training is suited to IT Directors onboarding junior security staff, cross-training help desk or systems personnel into security responsibilities, or standardizing knowledge across newer cybersecurity practitioners. Based on the course scope, learners should expect a moderate time investment of roughly 8–9 hours, making it realistic for phased assignment as part of onboarding or early-career development.

For organizations, this training supports role readiness in core topics like information assurance, risk management, business continuity and disaster recovery concepts, access control, security policies, data security, network threats, and on-premise infrastructure. It is best used for entry-level team members or experienced practitioners who need to validate foundational coverage rather than for advanced specialists seeking deep technical specialization. For change management, assign it alongside your internal policies and operational procedures so teams can connect foundational security concepts to your environment. Team leaders can use CBT Nuggets Playlists and Team Reporting to structure learning paths and monitor completion across cohorts.

IT teams rely on foundational security judgment to reduce preventable mistakes, especially when newer staff begin taking on operational security work. This training maps to practical areas teams encounter every day, including policy awareness, access control decisions, system hardening, and network threat recognition.

In real-world environments, this helps teams:

• Support safer onboarding of junior cybersecurity staff by building shared understanding of information assurance, governance, ethics, and controls.
• Improve resilience planning conversations by giving team members baseline familiarity with business continuity, disaster recovery, and incident response concepts.
• Reduce security gaps caused by inconsistent fundamentals in areas like access control, data protection, and system hardening.
• Strengthen day-to-day network security awareness by covering infrastructure, common threats and attacks, networking concepts, and on-premise network components.

For IT Directors, the value is consistency: teams complete this training to establish a common security language before moving into tool-specific administration, advanced defense work, or higher-stakes compliance responsibilities.

Knowledge

• Core information assurance concepts and how they support foundational cybersecurity work.
• Risk management basics, including controls, ethics, and governance concepts used in security decision-making.
• Business continuity, disaster recovery, and incident response concepts at a foundational level.
• Access control principles relevant to protecting systems and data.
• Security policy, security awareness, and training concepts that support organizational security practices.
• Foundational topics in data security, system hardening, network security infrastructure, threats, attacks, computer networking, and on-premise infrastructure.

Ability

• Participate more effectively in entry-level cybersecurity operations using a shared understanding of foundational security concepts.
• Recognize and discuss common security requirements related to access control, data protection, and hardening efforts.
• Contribute to team conversations about risk, governance, resilience planning, and incident response preparation.
• Identify foundational network security considerations, including infrastructure components and common threat areas.
• Apply course concepts as a baseline for transitioning into supervised security responsibilities or preparing for the (ISC)² CC certification.
• Build toward more consistent execution of security tasks by aligning foundational knowledge across new and developing team members.