18 Days Until the CC Exam Changes — What's Different and What to Do Now

August 14, 2026 — The ISC2 Certified in Cybersecurity (CC) exam outline updates on September 1, just 18 days away. If you're actively studying for CC, or thinking about starting, that deadline shapes your plan. Here's what's changing, plus what else is worth knowing this week across certifications and the broader job market.

News ISC2 CC exam outline changes September 1 — AI security is now woven throughout. The September 1 update represents the first major content revision to the CC since its 2022 launch. The most significant structural shift: AI security is no longer isolated — ISC2 has distributed foundational AI concepts across all five CC domains, reflecting an industry consensus that understanding AI threats and governance is now baseline, not advanced. The update also expands Identity and Access Management coverage to include identity lifecycle management, provisioning/deprovisioning, and IAM frameworks. If you're testing before September 1, your existing materials are fine. If you're starting fresh or testing after September 1, verify that your study resources reflect the updated outline before committing to them. (Sources: ISC2 CC Insights, ISC2 CC Community thread) ISACA CCS beta closes August 26 — 12 days left. ISACA's new Certified Cybersecurity Specialist (CCS) beta, aimed at early-career practitioners, is still accepting applicants through August 26. If you applied and are approved, expect a significant discount off the standard exam fee — that's the typical benefit of participating in a beta. The CCS is positioned as ISACA's replacement for the Cybersecurity Fundamentals Certificate (which retires June 2027). Worth acting on quickly if the entry-level credential space is on your radar. (Source: ISACA CCS page) Security+ SY0-801 is widely expected November 17 — still not officially announced. The November 17 launch date continues to be widely cited in the training community, sourced from CompTIA's instructor network but not formally confirmed by CompTIA. Key differences from SY0-701: the biggest addition is AI threat coverage — large language model risks, prompt injection, shadow AI, model poisoning. If you're studying now and can sit the current 701 before November, that remains a sensible path. If you're earlier in prep, the 701 is expected to stay active for several months after 801 launches — CompTIA has historically maintained prior versions for overlap periods. (Sources: Training Camp — SY0-801, CompTIA Instructors Network) AI skills are now the #1 cybersecurity hiring gap. A 2026 Fortinet skills gap report found that 41% of security teams cite AI/ML as their top unmet skills need, ahead of cloud security (30%). Separately, 64%+ of cybersecurity job listings in 2026 now reference AI, machine learning, or automation. The practical implication for certifications: credentials that include AI security content — like the updated CC, the ISC2 AI cert currently in pilot, and CompTIA's SecAI+ — are more future-proof than those that don't. (Sources: Fortinet 2026 Skills Gap Report, StationX job market statistics) The cybersecurity workforce gap remains roughly 4.8 million unfilled roles globally. Entry-level hiring continues to lag despite the overall gap — many organizations list roles requiring years of experience while claiming a talent shortage. Certifications, especially entry-level ones like CC, Security+, and the new CCS, remain one of the more reliable ways to get past initial resume filters and into interviews. (Source: DestCert — cybersecurity job demand) Study & Passing Tips

Schedule your exam before you feel completely ready. One of the most common ways people stall their certification progress is waiting until they feel "100% prepared" — a threshold that keeps moving. Booking the exam and paying the fee creates a concrete deadline that most people find genuinely motivating. A target date 4–6 weeks out forces you to prioritize and accelerate in ways that open-ended studying rarely does. You can always reschedule if something significant comes up.

Mine your wrong answers, not your right ones. After a practice session, the instinct is often to be pleased by a high score and move on. But your wrong answers — and especially the questions you guessed correctly — are the real study material. For every wrong answer, read the full explanation, identify why the correct answer is right and why your choice was wrong, and note if it reflects a concept gap, a vocabulary gap, or a misread of the question. That targeted review compounds much faster than covering more ground you already know.

For IAM and access control topics: understand the "why," not just the "what." Whether you're studying for CC, Security+, or CISM, identity and access management questions are consistently heavy across exams — and the updated CC outline leans into this more. The questions that trip people up aren't "what is least privilege?" — they're scenario-based: given this situation, what should be done first, and why? Study IAM by thinking through realistic scenarios: a user changes roles, a contractor's engagement ends, an account shows anomalous behavior. What's the right process and why?

How Test Prep Lite Can Help

If you're studying for CC, Security+, CISSP, CCSP, or CISM, Test Prep Lite has practice questions organized by exam domain — so you can drill specifically on IAM, access control, or whichever areas are weakest for you rather than grinding through questions at random. With the CC outline changing September 1, it's also worth checking that whatever practice source you use reflects the current or updated content. Try it at https://app.testpreplite.com.

Also Worth Knowing

The ISC2 CC is still free to attempt through ISC2's "1 million in cybersecurity" program (you may want to verify current terms directly at isc2.org/certifications/cc), making it one of the lowest-barrier credentials available for anyone entering the field. If you've been on the fence about whether to start there or jump straight to Security+, the answer for most beginners is: CC first, then Security+. The CC gives you a structured foundation and a real credential while you build toward the next level.

Sources: ISC2 CC Insights — updated outline · ISC2 CC Community thread · ISACA CCS · Training Camp — SY0-801 · Fortinet 2026 Skills Gap · StationX job market · DestCert job demand