ISC2 CC Gets a Full Overhaul, CompTIA Goes All-In on AI — What It Means for Your Cert Path

September 19, 2026 — Two significant certification changes landed this month: the ISC2 Certified in Cybersecurity (CC) exam went live with a major update on September 1, and CompTIA's AI-focused certification expansion is reshaping what employers expect from credential holders. Here's the rundown, plus study tips for getting the most out of timed practice sessions.

News The ISC2 CC exam updated on September 1, 2026 — and the changes are substantial. The revised CC still covers five domains, but the refreshed content outline places significantly more emphasis on GRC, IAM, cloud security, Zero Trust architecture, and incident response. Most notably, foundational AI security concepts are now woven across all five domains rather than isolated in a single section. The exam format is unchanged: 100–125 adaptive questions in two hours, no prior work experience required. If you're using study materials purchased before September 2026, verify they reflect the new Job Task Analysis (JTA). (Source: ISC2 — Inside the Updated CC Exam, ISC2 Community — CC Exam Changes September 2026) CompTIA is overhauling its certification landscape with SecAI+ and a coming Security+ refresh. CompTIA has introduced SecAI+, a new vendor-neutral AI security certification, and confirmed that Security+ SY0-801 launches November 17, 2026 — adding dedicated AI threat content including LLMs and AI threat modeling. SY0-701 remains valid for approximately six months after the new version launches. If you're 60–70% through your SY0-701 prep, finishing on the current version is the cleaner path. (Source: Planet Cert — CompTIA's 2026 Certification Map, SecuSpark — CompTIA Roadmap 2026) The cybersecurity talent gap stands at approximately 4.8 million unfilled positions globally — and AI isn't closing it. A Help Net Security report from July 2026 found that while AI is automating routine security tasks, it's simultaneously generating demand for new specialist roles (AI governance, security engineering, AI risk) faster than the workforce can absorb. About 10% of cybersecurity job listings now explicitly list AI skills. For certification candidates, this is a meaningful signal: certs that demonstrate AI-adjacent knowledge are gaining traction with hiring managers. (Source: Help Net Security — Cybersecurity Workforce Trends Report, SANS Institute — Inside the 2026 Cyber Workforce) Skills-based hiring continues to replace degree requirements in cybersecurity. Q3 2026 hiring data shows employers increasingly prioritizing certifications, hands-on labs, and demonstrated competency over four-year degrees. Financial services, government/defense, and healthcare are the sectors with the highest demand — and the strictest verification of claimed credentials. Completing a recognized cert isn't just a checkbox; it's often the mechanism that gets a resume past an automated screening filter. (Source: QuickStart — Cybersecurity Hiring Trends Q3 2026, Spectraforce — Cybersecurity Hiring Trends 2026) ISACA is launching updated CISM exam prep materials now, ahead of the November 3 exam content change. As reported yesterday, the CISM Job Practice update takes effect November 3 with new content areas including enterprise architecture and information security architecture. ISACA began releasing updated prep materials on September 11, 2026 — available through the ISACA store and their learning platform. (Source: ISACA — CISM Job Practice Update 2026) Study & Passing Tips

Know the domain weights before you build your study schedule. Every CompTIA, ISC2, and ISACA exam publishes a detailed content outline showing what percentage of the exam each domain accounts for. This isn't trivia — it's your study budget. On Security+ SY0-701, for example, Security Operations is 28% of the exam, which means a weaker grasp of that domain costs you far more than the same weakness in a 12% domain. Before opening a textbook, download the official exam objectives and note the domain weights. Build your weekly study time proportionally, not equally across all topics.

Use timed practice under real exam conditions at least once a week. Many candidates practice questions without time pressure and are surprised when the actual exam clock creates performance anxiety. A 90-minute timed block — questions only, no notes, no pausing — builds the mental stamina the exam actually requires and reveals whether you're genuinely ready or just comfortable with the material in an open-note setting. The ISC2 CC is 2 hours, CompTIA exams typically run 90 minutes, and CISSP is 3 hours (or 4 for the linear version): practice to the format you'll actually face.

For the updated ISC2 CC: treat Zero Trust as a first-class topic, not background noise. Zero Trust architecture moved from an implicit mention in older CC materials to an explicitly tested concept in the updated exam. The core principle — never trust, always verify, least privilege everywhere — shows up in network design questions, IAM questions, and incident response scenarios. If you're studying for the CC, spend focused time on: why Zero Trust emerged (perimeter security failures), its main components (identity verification, microsegmentation, continuous validation), and how it differs from traditional network security models.

Build in a dedicated review block the evening before your exam. This isn't for learning new material — it's for consolidating what you've already studied. A focused 60–90 minute review the night before should cover: your weak-domain notes, any practice question areas where you flagged uncertainty, and a quick pass through the official exam objectives to confirm there are no blind spots. Avoid cramming new chapters the night before; your brain consolidates learning during sleep, so going in well-rested is worth more than one more chapter read at midnight.

How Test Prep Lite Can Help

If your study materials are from before September 2026, it's worth checking whether the ISC2 CC and CISM content has been updated to match the new exam outlines. Test Prep Lite covers the ISC2 CC, CISSP, CCSP, ISACA CISM, and the full CompTIA lineup — with practice questions built around current exam objectives, domain tracking so you can see exactly where you're strong and where you're not, and the ability to practice under realistic timed conditions. Check it out at https://app.testpreplite.com.

Also Worth Knowing

If you're an ISC2 CC candidate who studied using pre-September 2026 materials, ISC2 published a summary of the updated content outline that's worth a read before your exam date. It's a concise overview of what's new — particularly helpful for spotting AI security topics and updated Zero Trust content that may not be in older prep guides.