Your 2026 Guide to ISC2 Certifications

Key takeaways

• ISC2 certifications are globally recognized cybersecurity credentials that validate general and specialized skills for security professionals just entering the field, as well as those with several years of experience.

• The ISC2 certifications path depends on your career goals; for example, aspiring chief information security officers often progress from the Certified in Cybersecurity to CISSP and then ISSMP.

• ISC2 cybersecurity certifications include the Certified in Cybersecurity (CC), Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), and Certified Cloud Security Professional (CCSP).

ISC2 certifications can be worth it if you want to demonstrate high-demand cybersecurity skills and improve your earning potential. Explore the potential ISC2 certifications you could pursue, including the skills and experience each will validate, how much they cost, and examples of job roles that each certification may be appropriate for.

If you're ready to build your cybersecurity skills, consider enrolling in the IBM and ISC2 Cybersecurity Specialist Professional Certificate, where you'll have the opportunity to build job-ready skills needed to get your first cybersecurity role, plus prep for the ISC2 Certified in Cybersecurity (CC) exam employers look for, in as little as three months. Upon completion, you’ll earn a career certificate for your resume.

What are ISC2 certifications?

ISC2 certifications are globally recognized and in high demand by employers. Perhaps even more so in the face of the ongoing shortage of professionals with cybersecurity skills. What's more, gaining an ISC2 certification may offer strong earning potential. According to global data from ISC2, the worldwide median salary for ISC2-certified professionals ranges from $95,200 to $140,620, depending on the credential [1].

Organized in 1989, the ISC2 has over 265,000 certified members worldwide and offers both general and specialized certifications to meet the needs of professionals entering cybersecurity for the first time and professionals validating experience in the field [2]. General ISC2 certifications can help you prepare for a wide variety of roles in cybersecurity and validate different levels of professional experience.

For many people entering cybersecurity roles for the first time, certification can be a way to demonstrate a standard of knowledge specific to the skills you’ll need for your job. For example, a CISSP certification validates that you have at least five years of experience working in cybersecurity roles and the knowledge required to lead or manage a cybersecurity program.

Specialized ISC2 certifications, still relevant to various roles in cybersecurity, validate specific components of the industry, such as data governance, applying cybersecurity to the software development lifecycle, or managing cybersecurity in cloud computing.

Demand for cybersecurity skills and ISC2 cybersecurity certifications

Earning a certification can help you develop your skills in a high-demand field that the US Bureau of Labor Statistics (BLS) expects to grow by 29 percent between 2024 and 2034 [3]. New technologies such as cloud-based services, generative artificial intelligence (AI), and Internet of Things (IoT) devices drive the demand for cybersecurity professionals because of the increased cybersecurity risks these technologies inherently present.

Also notable, cybersecurity threats continue increasing worldwide. In 2025, companies around the world experienced a record number of data breaches (3,322), surpassing the 2023 all-time high figure (3,202). In total, cyber threats affected 278,827,933 victims in 2025 [4].

The increased threat from the sheer volume of attacks and new technologies contributes to a global demand for cybersecurity professionals and a shortage of individuals in the job market with cybersecurity skills. In ISC2’s 2025 Cybersecurity Workforce study, 95 percent of respondents reported their organization has at least one cybersecurity skill need, while 59 percent reported critical or significant skill shortages, up from 44 percent in 2024 [5]. In the same survey, 67 percent of professionals reported that they would recommend cybersecurity certifications as a career pathway for securing a cybersecurity role [5].

ISC2 certifications can help you demonstrate to potential employers that you have a level of industry-standard knowledge and experience in cybersecurity. In turn, it can also help you qualify for leadership roles or roles with higher salaries, such as a security manager or chief information security officer. ISC2 is a member organization that provides cybersecurity professionals with resources such as industry and career research, professional training, networking, advocacy, and certification.

How to prepare for ISC2 certifications

To earn an ISC2 certification, you will need to pass an exam without completing a course component. This can be helpful because it allows you to determine the best method for preparing and reviewing the materials on the exam. You can download outlines for each of the exams with more information about the topics covered and access links to courses that may help you prepare. Your course options include offerings directly from ISC2 or from ISC2 training partners. You can also find certification prep materials directly from ISC2 on Coursera, such as the Certified in Cybersecurity Specialization.

ISC2 certifications list: 9 options to consider

When choosing the ISC2 certification that can help you reach your career goals, you should consider your experience in the field and what kind of cybersecurity work you’d like to be involved with. For example, if you want to certify your skills managing cybersecurity in a network or systems administrator role, you can consider the SSCP (Systems Security Certified Practitioner) to help you demonstrate that set of skills to potential employers.

Many certifications require professional experience, which could also determine which certification will work best for you at this stage in your career. For example, if you’re new to the field and just beginning your career path, you might pursue the Certified in Cybersecurity (CC) option instead.

Explore ISC2 certifications, as well as the skills and experience they validate, the price of the exam, and examples of job roles that the certification may be appropriate for.

1. Certified in Cybersecurity (CC)

The CC is a foundational-level exam that demonstrates you have the knowledge to start a career in an entry-level cybersecurity role. You will not need professional experience to take this exam. Although ISC2 provides salary information for the next eight options, it does not offer data for this entry-level credential.

Who should take this exam: This exam can demonstrate your knowledge to start an entry-level role in cybersecurity, such as a cybersecurity specialist, information technology (IT) auditor, or security analyst.

Cost: $199 [6]

2. Certified Information Systems Security Professional (CISSP)

The CISSP (Certified Information Systems Security Professional) certification demonstrates that you have five years of professional experience and the knowledge to manage a cybersecurity program or department. The median salary for a CISSP in North America is $150,000 [7].

Who should take this exam: CISSP certification may be a good move for your career goals if you want to pursue positions such as chief information security officer, IT director, security analyst, or security architect.

Cost: $749 [6]

3. Systems Security Certified Practitioner (SSCP)

The SSCP can help you validate one year of professional experience and the knowledge required to securely operate and manage IT infrastructure, such as in a systems administrator role. The median salary for an SSCP in North America is $102,000 [8].

Who should take this exam: If you are considering roles such as network security engineer, security administrator, systems administrator, or health information manager, you might opt for this credential.

Cost: $249 [6]

4. Information Systems Security Architecture Professional (ISSAP)

Earning the ISSAP can help you demonstrate seven total years of professional experience, or the CISSP certification with two years of professional experience, and the knowledge required to develop and design system-wide security architecture. The global median salary for an ISSAP is $140,620 [1].

Who should take this exam: You might consider the ISSAP if your career goals involve moving into positions such as chief technical officer, chief security officer, business analyst, or systems architect.

Cost: $599 [6]

5. Information Systems Security Engineering Professional (ISSEP)

To earn this certification, you will need seven total years of professional experience, or the CISSP certification with two years of professional experience, and the knowledge required to plan, design, and manage security operations in business processes and applications. The global median salary for an ISSEP is $136,800 [1].

Who should take this exam: This certification may be relevant to your career if you wish to work as an information assurance systems engineer, information assurance officer, or senior security analyst.

Cost: $599 [6]

6. Information Systems Security Management Professional (ISSMP)

The ISSMP validates seven total years of professional experience, or the CISSP certification with two years of experience, and the knowledge required to establish and govern an information systems security program in a role such as chief information security officer. The global median salary for an ISSMP is $130,000 [1].

Who should take this exam: The ISSMP is a certification that may help you qualify for positions such as chief information security officer or senior security executive.

Cost: $599 [6]

7. Certified Secure Software Lifecycle Professional (CSSLP)

The CSSLP certification can help you show four years of professional experience and the knowledge required to apply security best practices to software development. The median salary for a CSSLP in North America is $150,000 [9].

Who should take this exam: CSSLP may be beneficial for your career goals if you wish to work as a software architect, software engineer, software program manager, penetration tester, project manager, security manager, or quality assurance tester.

Cost: $599 [6]

8. Certified Cloud Security Professional (CCSP)

The CCSP can help you demonstrate five years of professional experience and the knowledge required to design and create security cloud solutions. The median salary for a CCSP in North America is $146,000 [10].

Who should take this exam: You might consider earning the CCSP if you want to work in roles such as cloud architect, cloud engineer, cloud administrator, or professional cloud developer.

Cost: $599 [6]

9. Governance, Risk, and Compliance Certification (CGRC)

The CGRC is a specialized certification that helps you demonstrate two years of professional experience and the knowledge required to apply cybersecurity principles through risk management frameworks. The median salary for a professional with a CGRC in North America is $140,000 [11].

Who should take this exam: The CGRC may be appropriate for you if your career goals include positions such as cybersecurity auditor, cybersecurity compliance officer, cybersecurity risk and controls analyst, or enterprise risk manager.

Cost: $599 [6]

Are ISC2 certifications worth it?

The value you see in gaining ISC2 certification depends on your career goals, current skills and experience, and highest level of education.

That said, ISC2 is a highly respected organization that helps to set the standards for what professionals in the industry should know. Earning a cybersecurity certification from ISC2 allows you to demonstrate skills in a high-demand industry and potentially earn a higher salary. Weigh the potential benefits of certification against the costs you will pay to obtain certification, such as the price of the exam and the time spent studying. You can also consider certification programs from other vendor-neutral organizations, including ISACA and the IAPP.

Read more: 8 Popular Cybersecurity Certifications

What jobs can you get with an ISC2 certification?

Since ISC2 certification spans such a wide range of positions, both general and specialized, within the field of cybersecurity, you may consider a variety of certification paths depending on the position you’d like to obtain.

For example, if you’d like to become a chief information security officer, you may start by earning the Certified in Cybersecurity certification to validate entry-level job skills and start working as an entry-level security analyst. After gaining some experience, you may earn your CISSP to validate the skills you’ll need to start working as an IT manager. After a few more years of experience, you may decide to earn your ISSMP, which could help you qualify for a role as a chief information security officer.

Other jobs you may consider with ISC2 certification (and the median total salary you can expect in the role) include:

*All salary information represents the median total pay from Glassdoor as of July 2026. These figures include base salary and additional pay, which may represent profit-sharing, commissions, bonuses, or other compensation.

• Cybersecurity specialist: $146,000

• Security analyst: $124,000

• IT director: $168,000

• Network security engineer: $168,000

• Systems administrator: $115,000

• Security architect: $233,000

• Cloud administrator: $118,000

• Software architect: $230,000

Discover resources that support ongoing development

Explore career paths, assess your skills, and connect with resume guidance while browsing our Career Resources Hub. Or if you want to learn more about a cybersecurity career, check out these free resources:

• Read our Career Chat issue: 8 Cybersecurity Certifications for Career Growth

• Hear from a peer: Meet the IT Support Tech Advancing Toward a Cybersecurity Career

• Watch on YouTube: How IBM and ISC2 Can Help You Prepare for a Career in Cybersecurity

Accelerate your career growth with a Coursera Plus subscription. When you enroll in either the monthly or annual option, you’ll get access to over 10,000 courses.