The complete ISC2 Certified in Cybersecurity (CC) study library — 19 lessons mapped to every domain and topic in the official exam guide. Free to read, no account needed.
Create a free account to track completed lessons, bookmark topics and see your exam readiness.
ISC2 publishes exactly what the CC tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.
Core cybersecurity concepts, risk management, governance, controls, and professional ethics. Official weighting 24%.
Governance, Risk, and Compliance; redundancy (BC/DR); security awareness; and measuring effectiveness. Official weighting 17.3%.
Identity lifecycle management and logical access controls. Official weighting 20%.
Network security, network security architecture, and cloud security. Official weighting 21.3%.
Data security, security operations, incident response, asset protection, and security testing. Official weighting 17.3%.
Reading every note front to back is the slowest way to pass. The exam is weighted, so your revision should be too — the blueprint above tells you exactly where the marks are.
Security Principles carries the most marks on the CC, so it earns the most of your attention. Work down the blueprint from the heaviest domain to the lightest rather than starting at domain 1 and grinding forward.
Read each lesson once without stopping to memorise — you are building a map, not a memory. On the second pass, read only the "what's tested" and key-takeaway blocks. If a takeaway surprises you, that lesson goes back on the pile.
Cover a lesson's key takeaways and try to say them out loud from the heading alone. Recall you can produce under your own steam is the only recall that survives a timed exam; recognition on a re-read is not the same thing.
Finishing the notes is not the goal — scoring is. Move to CC practice questions early, then come back to the exact lessons your wrong answers point at. That loop is worth far more than a third read-through.