ISC2 Certified in Cybersecurity (CC) Preparation

Program facts

Study fee

Free

subjects

5

lessons

24

Estimated time

22.5 hours

Content last reviewed

24 October 2026

Access period

30 days

Study language

Arabic and English

About the program

Five modules and 24 lessons cover security principles and risk; governance, continuity and awareness; identity and access; networks and cloud; then data protection, operations and response. Each lesson explains distinctions through a case and two exercises with separate guided solutions. Lesson checks provide explained feedback, followed by a distinct internal assessment and unofficial readiness mock. The current ISC2 outline defines exam scope; the program uses original examples and does not reproduce issuer questions. A mock score is not an official pass prediction, and the platform makes neither an eligibility decision nor a CC award.

Practical relevance

With fictional nonsensitive data, learners build a risk record, access matrix, network path and initial triage note. Cases require a specific calculation or comparison and a statement of inference limits. The method can be used within an employer's policies and authorization without copying customer data into exercises.

Why this program

Beginners can remember control names yet struggle to decide what evidence makes an intervention fit. Each application asks what is established, what needs checking, who may decide and how an action affects service or data. Current CC outline tasks are linked to teaching and questions while case complexity remains foundational.

Career relevance

Learners entering support, operations or governance gain shared language for risks, permissions and alerts. Short decision records help communicate with service owners and security teams. The program does not imply independent incident-response authority, promise a job or grant issuer approval.

What you will learn

• Classify security properties, risk, controls and professional conduct from case evidence.
• Connect governance, continuity and awareness to measurable execution.
• Trace a constrained identity and permission from creation to removal.
• Read a network path and select a narrow rule and cloud responsibility.
• Triage an event, protect assets and data, and choose an authorized response or test step.

Who it is for

• This path serves cybersecurity beginners, career changers and IT staff seeking structured review of the five CC domains. It suits learners who connect definitions to short cases and worked exercises before using internal questions to identify gaps. Service supervisors and support analysts may apply the method within their roles; the program assumes neither production administration nor independent investigation authority and does not replace workplace instructions.

Curriculum

1. Subject 1 Open for free

   Security Principles, Risk and Professional Conduct

   Classify security properties, risk and controls with evidence-based professional judgment.

   5 lessons · 4 hours

   1. What happened to confidentiality, integrity and availability? 46 min
   2. From a Risk Description to a Treatment Decision 50 min
   3. Who Sets the Rule and Who Executes It? 44 min
   4. Control Layers: Administrative, Technical and Physical 44 min
   5. Ethical Decisions Under Pressure to Conceal 48 min
2. Subject 2

   Governance, Resilience, Awareness and Measurement

   Connect governance, continuity and awareness to metrics and operating evidence.

   4 lessons · 3.5 hours

   1. Govern Risk From Decision to Evidence 48 min
   2. Continuity, Recovery and Redundant Paths 56 min
   3. Awareness That Changes the Phishing Response 48 min
   4. A Risk Indicator That Informs a Decision 52 min
3. Subject 3

   Identity Lifecycle and Access Control

   Scope, review and withdraw human and service identity access.

   5 lessons · 4 hours

   1. A New Identity: Define the Role Before Creating Access 48 min
   2. Review and Removal: Expiry Is Part of Access Design 52 min
   3. Least Privilege and Separation of Duties in One Transaction 48 min
   4. An Access Model Is Not a Login Method 48 min
   5. Service Identity From Request to Revocation 48 min
4. Subject 4

   Networks, Cloud and Security Architecture

   Read connection paths, bound network access and allocate cloud responsibilities.

   5 lessons · 4.5 hours

   1. Read the Connection Path Before Blaming the Firewall 56 min
   2. A Firewall Rule Between Source and Destination 52 min
   3. Wireless and Embedded Devices: Inventory Before Isolation 52 min
   4. Segmentation, Defense in Depth and Zero Trust 56 min
   5. Cloud: Service Model, Deployment and Remaining Responsibility 56 min
5. Subject 5

   Data Protection, Operations and Response

   Minimize data exposure, triage incidents and test within authorization.

   5 lessons · 5 hours

   1. Classify Data, Limit Disclosure and Protect It 56 min
   2. From a Single Alert to an Evidence-Based Priority 1 hours
   3. Incident Response Plan and Tabletop 1 hours
   4. Assets Through End of Life and Changes Through Rollback 52 min
   5. Test Defenses Without Confusing Scanning With Exploitation 56 min

Subjects unlock in sequence as you progress.

Strengths

• Explicit mapping to current five-domain outline tasks.
• Bilingual cases with separate worked solutions and inference limits.
• Separated lesson practice, internal assessment and unofficial mock.
• Reviewable decisions naming evidence, owner, action and result.

Evidence basis

The ISC2 outline effective September 2026 defines domain scope; NIST, CISA, RFC and OWASP sources support operational concepts within inspected page limits. Exercises and questions are original. Citing a publisher does not imply its endorsement.

How the route works

Professional Certification Preparation programs help learners prepare for a recognized external certification through structured knowledge, review, practice questions, and readiness assessments. Arab Platform for Professional Studies (ARPS) does not administer the certification owner's official exam.

Structured self-paced study aligned to the current external certification scope, with knowledge review, practice questions, readiness checks, and internal mock assessments.

• Focused preparation for a specific external certification.
• Content aligned to the current official exam scope when available.
• Practice questions and internal readiness assessments.
• Clear separation between Arab Platform for Professional Studies (ARPS) preparation and the official external exam.

Assessment

The route includes an internal assessment for Arab Platform for Professional Studies (ARPS) completion eligibility and separate mock/readiness assessments that are not the external official exam.

Assessment attempts: 2 per assessment, 7 days apart

The pass mark is announced before the program is published.

Certificate

The Arab Platform for Professional Studies (ARPS) credential confirms completion of the preparation program only; the target professional certification requires passing the external issuer's examination under its rules.

Every certificate has a public verification code. Verify a certificate

Verification example: a real issued certificate

Disclaimer: Any internal completion credential records preparation completion only; it is not CC or ISC2 endorsement.

Program questions