Syllabus-first teaching
CC syllabus chapters
ISC2 CC outline effective 1 September 2026 · Source checked 2026-10-22
19 topic chapters teach concepts before asking you to apply them. Explore the visual model and memory hint, try the concept activity, then read the explanations and worked example. Selected topics also include interactive local simulations.
Authored teaching for all 19 top-level objectives; independent review and exam-readiness validation remain pending. Topic presence is not a certification of sufficient mastery. Chapter progress is separate from the earlier domain-overview progress.
Official syllabus reference · Edition and coverage boundaries
Your CC chapters progress
Loading progress…
Saving is off; progress stays in this course session only. No academy account or cloud sync. Each course has separate data.
Individual quiz answers remain in memory only. Completed score summaries can be saved and backed up. Storage details
Find a lesson
19 matching lessons
Domain 1 · About 6 minutes
1.1 · Security properties, identity and privacy
What each property protects
Not marked complete · Not bookmarked
Domain 1 · About 6 minutes
1.2 · Risk management from scenario to review
Describe risk before rating it
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1.3 · Laws, frameworks, policies, standards and procedures
Know the authority behind a requirement
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1.4 · Administrative, technical and physical controls
Classify how a control works
Not marked complete · Not bookmarked
Domain 1 · About 5 minutes
1.5 · Professional ethics, due care and due diligence
Distinguish prudent action from investigation
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2.1 · Plan governance, risk and compliance work
Understand the three connected functions
Not marked complete · Not bookmarked
Domain 2 · About 6 minutes
2.2 · Redundancy, continuity and disaster recovery
Start from the business activity
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2.3 · Build security awareness that changes behavior
Recognize the mechanism of social engineering
Not marked complete · Not bookmarked
Domain 2 · About 5 minutes
2.4 · Measure effectiveness with meaningful metrics
Define the question and denominator
Not marked complete · Not bookmarked
Domain 3 · About 6 minutes
3.1 · Manage human and service identities throughout their lifecycle
Provision an identity for an approved purpose
Not marked complete · Not bookmarked
Domain 3 · About 6 minutes
3.2 · Least privilege, separation of duties and access models
Distinguish the access decision models
Not marked complete · Not bookmarked
Domain 4 · About 9 minutes
4.1 · Network layers, addressing, firewalls, wireless and devices
Follow data through network layers
Not marked complete · Not bookmarked
Domain 4 · About 5 minutes
4.2 · Segmentation, defense in depth and zero trust
Create enforceable boundaries
Not marked complete · Not bookmarked
Domain 4 · About 6 minutes
4.3 · Cloud characteristics, service models and shared responsibility
Recognize cloud characteristics
Not marked complete · Not bookmarked
Domain 5 · About 7 minutes
5.1 · Classification, data handling and cryptographic functions
Apply protection throughout the data lifecycle
Not marked complete · Not bookmarked
Domain 5 · About 5 minutes
5.2 · Security monitoring, triage, threat actors and intelligence
Create usable event evidence
Not marked complete · Not bookmarked
Domain 5 · About 5 minutes
5.3 · Incident response plans, handling and exercises
Use the plan to coordinate people and actions
Not marked complete · Not bookmarked
Domain 5 · About 6 minutes
5.4 · Asset lifecycle, secure configuration and controlled change
Know what exists and who owns it
Not marked complete · Not bookmarked
Domain 5 · About 5 minutes
5.5 · Security testing methods and authorized assessment
Choose the method for the question
Not marked complete · Not bookmarked
Use the practice bank after studying
The existing question bank is supporting practice, not a substitute for these chapters or evidence of certification readiness. Its questions are not an exhaustive test of every new chapter.
Open CC practice