Certification Roadmap

ISC2 Certification Path

The most respected cybersecurity certifications — from entry to elite

Entry CC: 4–8 weeks; CISSP: 3–5 years industry experience + 3–6 months study
4 certifications across 3 levels

ISC2 (formerly (ISC)²) credentials are the most globally recognised cybersecurity certifications. CISSP is the gold standard for senior security professionals and required for many government and enterprise roles. All ISC2 certifications require Continuing Professional Education (CPE) credits to maintain — 120 credits over 3 years for CISSP.

Where to start — by experience level

New to cybersecurity

CC is free through ISC2's entry program — start here. Then Security+ for employer recognition, then build toward CISSP.

Security+ or 2+ years in IT

SSCP bridges the gap between practitioner and manager. It validates operational security skills.

Senior security professional

CISSP requires 5 years of experience — if you have it, go straight to CISSP. It's the single most impactful credential in cybersecurity.

ISC2 certification tiers

Entry

No experience required — entry into cybersecurity

CC

Certified in Cybersecurity (CC)

4–8 wks
Intermediate

1–2 years cybersecurity experience

SSCP

Systems Security Certified Practitioner

2–4 mo
Recommended after CC
Advanced

5 years cybersecurity experience required for full certification

CISSP

Certified Information Systems Security Professional

3–6 mo
Requires 5 years relevant experience in 2+ CISSP domains
CCSP

Certified Cloud Security Professional

2–4 mo
Recommended after CISSPCloud-focused — pairs with AWS/Azure security certs
Core path (recommended sequence)
Optional / elective

ISC2 certification — frequently asked questions

Is CISSP worth it?

CISSP is widely considered the most valuable cybersecurity certification. It's required for CISO and senior security roles at government agencies and enterprises globally. Certified professionals earn 25–40% more than non-certified peers in equivalent roles.

Do I need 5 years experience for CISSP?

Yes — 5 years of paid work experience in at least 2 of the 8 CISSP domains. If you have 4 years + a 4-year degree, that satisfies the requirement. You can sit the exam without the experience and become an Associate of ISC2 until you accumulate it.

Practice every exam on this path

JT Exams covers all ISC2 certifications with full question banks, domain tracking, and AI-powered explanations. One subscription. Every cert.

No credit card · Cancel anytime

Related certification paths