The ISC2 CC Exam Just Changed — Here's What to Know Now

September 9, 2026 — The ISC2 CC exam update that's been on the radar all summer went live September 1st. Plus: the CCSP has a new outline, a big AI security certification is on the horizon, and the cybersecurity job gap remains massive. Here's the week's roundup.

News ISC2 CC exam update is now in effect. As of September 1, 2026, the Certified in Cybersecurity (CC) exam runs on its updated outline — the first major content refresh since the credential launched in 2022. The revised exam adds an explicit governance and risk domain, weaves AI security concepts throughout all five domains, and expands IAM coverage. If you're studying for the CC right now, confirm that your practice materials reflect the new objectives before you sit. (Source: ISC2 — What's New for Entry-Level Cybersecurity) CCSP exam updated August 1. The Certified Cloud Security Professional exam also transitioned to a new outline last month. The revised domains reflect how cloud security has matured, particularly around shared responsibility models, cloud-native security controls, and supply chain visibility. If you're mid-prep on CCSP, verify that your study resources match the current outline. (Source: ISC2 — CCSP Exam Outline) ISC2 is building a standalone AI security certification. Confirmed in July 2026, ISC2 is developing a new vendor-neutral AI security credential — the first exam-based certification from the CISSP organization focused entirely on securing AI systems. A pilot exam is expected in late 2026. This signals that AI security is no longer just a specialization footnote; it's becoming a formal certification track. (Source: CertCrush — ISC2 AI Security Certification 2026) EU Cyber Resilience Act vulnerability reporting begins. As of this month, manufacturers are required to begin vulnerability reporting obligations under the EU Cyber Resilience Act, with full compliance requirements kicking in by end of 2027. For candidates studying for CISSP, CISM, or CASP+, this is a live example of the regulatory and governance frameworks you'll encounter on the exams — and in the workforce. (Source: ABI Research — Top Cybersecurity Trends 2026) Cybersecurity workforce gap remains enormous. The global cybersecurity workforce is expected to exceed 5.9 million professionals in 2026, but an estimated 3.1–3.5 million roles remain unfilled worldwide, according to industry reporting. ISC2 identifies AI/ML as the #1 skill gap cited by security teams this year. The U.S. Bureau of Labor Statistics projects 29% employment growth for information security analysts from 2024 to 2034 — well above average for any profession. (You may want to verify specific numbers from primary sources like BLS.gov and ISC2's Cybersecurity Workforce Study.) (Source: DestCert — Cybersecurity Job Demand 2026) Study & Passing Tips

If your target exam just changed its outline, do a quick gap audit before continuing. Pull up the current official exam outline (available free from CompTIA, ISC2, or ISACA) and compare it to the table of contents in your study guide or the domains covered by your practice question bank. Look for domains or sub-objectives that appear in the official outline but not your materials. A 20-minute audit can save you from a surprise on exam day.

Use real regulatory frameworks as study anchors. Documents like NIST SP 800-53, the GDPR, and now the EU Cyber Resilience Act aren't just exam trivia — they're actively shaping what organizations are being audited on. When you encounter a governance framework on a practice question, pause and think about what a real compliance team would actually do. Connecting abstract objectives to live examples makes them far easier to retain.

Treat the job gap as your timeline. With approximately 3.5 million unfilled cybersecurity roles globally, there's no "perfect moment" to get certified — there's just sooner and later. If you're weighing whether to take the next step now or wait until you feel more ready, consider that even an entry-level cert like CompTIA Security+ or ISC2 CC substantially expands the positions you qualify for in a market that's actively searching for people. Don't let the perfect be the enemy of the passed.

How Test Prep Lite Can Help

With multiple exam outlines changing this year — CC in September, CCSP in August, and Security+ SY0-801 arriving in November — staying aligned with current objectives is genuinely important. Test Prep Lite's practice questions are organized by domain and mapped to active exam objectives, so you can quickly focus your prep on the domains that matter most right now and track your progress over time. Check it out at https://app.testpreplite.com

Also Worth Knowing

If you're considering the ISC2 CCSP and already hold one of ISC2's other certifications, you may qualify for a reduced exam or AMF cost depending on your membership tier. Worth checking the ISC2 membership benefits page directly before you purchase. And if you're job-hunting with fresh certifications in hand, CyberSeek's interactive heat map shows real U.S. cybersecurity job demand by geography and role — useful for targeting your search.

Sources: ISC2 — CC Exam Update · CertCrush — ISC2 AI Cert · ABI Research — Cybersecurity Trends 2026 · DestCert — Cybersecurity Job Demand · Cybersecurity Dive — 2026 Trends