Most CC books on sale today teach an exam that no longer exists. ISC2 replaced the Certified in Cybersecurity outline on September 1, 2026, and of the publisher-backed study guides you can buy on Amazon, only one was written for it. The rest still organize their chapters around the 2022 domains, which ISC2 now labels the 2025 outline. That does not make them useless, but it does mean the best ISC2 CC books list looks different from the one you would have found in the spring.
This guide ranks six books by how well they prepare you for the current exam, says plainly which ones are on the old outline, and names the lookalike titles to avoid.
Checked against the ISC2 CC exam outline effective September 1, 2026, and live Amazon listings in October 2026. These are books, so nothing here was lab tested.
What changed in the CC exam on September 1, 2026
The exam still has five domains. Three of them were renamed and rescoped, and one was replaced outright. Business continuity, disaster recovery and incident response used to be its own domain at 10%. It is gone. Its incident response material moved into Security Operations, and a new Security Governance domain took the slot at 17.3%. The official breakdown is on the ISC2 CC exam outline page.
| Domain | 2022 outline | Weight | From Sep 1, 2026 | Weight |
|---|---|---|---|---|
| 1 | Security Principles | 26% | Security Principles | 24% |
| 2 | Business Continuity, Disaster Recovery and Incident Response Concepts | 10% | Security Governance | 17.3% |
| 3 | Access Controls Concepts | 22% | Identity and Access Management Concepts | 20% |
| 4 | Network Security | 24% | Networking and Cloud Security Concepts | 21.3% |
| 5 | Security Operations | 18% | Security Operations and Incident Response | 17.3% |
The new topics are where an old book will leave you exposed. ISC2’s own write-up of the update lists a dedicated governance and risk domain, zero trust, the shared responsibility model, threat intelligence, incident response planning and exercises, security testing and quantum-resistant cryptography. It also spreads foundational AI security concepts across all five domains. Older books do cover cloud deployment models and basic incident response, because the 2022 outline had them. Most of the rest, and all of the AI material, is missing.
The format changed earlier, on October 1, 2025. CC is now a computerized adaptive test: 100 to 125 items in two hours, with a pass mark of 700 out of 1000. Adaptive means the exam stops when it is confident about you, so you cannot bank easy points early and coast. Practice under a timer.
The free CC exam is over for new candidates
If a forum post tells you the exam and training are free, it’s out of date. ISC2’s One Million Certified in Cybersecurity program closed to new enrollments on May 20, 2026. Anyone already holding an unexpired code has to sit the exam by December 31, 2026. For everyone else the exam now costs US $199 in most regions, plus a $50 annual maintenance fee once you pass, and the official self-paced course is a paid product.
That shifts the math. A $40 book used to be an optional extra next to free training. Now it is often the main study resource, so picking the wrong edition costs you a failed attempt, not just the cover price.
The six CC books at a glance
| Book | Written for | Practice material | Price |
|---|---|---|---|
| Sybex CC Study Guide, 2nd Ed. | 2026 outline | Online practice exam, flashcards, glossary | About $40 |
| McGraw Hill CC All-in-One | 2022 outline | Over 200 questions | About $22 |
| Pearson CC Cert Guide | 2022 outline | Pearson Test Prep engine | About $36 |
| Packt (ISC)2 CC Exam Guide | 2022 domains, CAT format | Two 125-question mock exams | About $32 |
| Cybersecurity For Dummies, 3rd Ed. | Not exam mapped | None | About $14 |
| Cybersecurity Essentials | Not exam mapped | Chapter review questions | About $23 |
1. CC Certified in Cybersecurity Study Guide, Second Edition by Mike Chapple
Buy this one first. It’s the only publisher-backed CC study guide on Amazon that covers the 2026 to 2029 exam objectives, and the cover says so in red. Mike Chapple wrote it, and Sybex put it out in September 2026, two weeks after the new outline went live.
The chapters follow the new domains by name: Security Principles, Security Governance, Identity and Access Management, Networking and Cloud Security, and Security Operations and Incident Response. Wiley also lists AI coverage written against ISC2’s 2026 exam guidance for AI, which is exactly the gap the older books have. Purchase includes the Sybex online learning environment with a full practice exam, electronic flashcards and a searchable glossary.
Best for: anyone sitting CC from now on. The catch: 272 pages is an overview, not a deep dive. Reviewers of the first edition liked how readable it was and asked for more practice questions, and the second edition is too new to have many reviews of its own. Plan to add a second question source. About $40 in print, around $32 on Kindle.
2. CC Certified in Cybersecurity All-in-One Exam Guide by Bennett and Genung
The best value on the list, with one warning you must not skip. Steven Bennett and Jordan Genung wrote this for the 2022 outline, McGraw Hill published it in June 2023, and there is no second edition yet. Its chapters still include Business Continuity, Disaster Recovery and Incident Response as a standalone domain.
So why rank it second? Because the explanations are good and the question bank is big. McGraw Hill lists over 200 practice questions, and the book holds a 4.8 star average from more than 80 Amazon ratings. Most of the principles, access control, networking and operations content still applies. Use it as the second source next to the Sybex guide, not as your only book.
Buy it as: your second book, for more questions and a second explanation of the core topics. Do not buy it as your only book. It has no governance domain, no zero trust coverage, no AI material and only the old outline’s brief cloud basics. Often around $22, well under its $50 list price.
3. CC Certified in Cybersecurity Cert Guide by Galloway and Jamali
Pearson’s entry is the pick for people who learn by drilling. Mari Galloway and Amena Jamali wrote it for the 2022 outline, and Pearson IT Certification published it in July 2024.
The strength is the Pearson Test Prep software, which lets you build custom quizzes by chapter and take timed exams. Chapters on risk management, physical and logical access controls and networking still line up with most of the new outline. A chapter on security in emergencies covers the continuity material that now sits under governance and operations.
Good fit: learners who want chapter quizzes and a practice engine. Weak spot: social proof. It has only a couple of Amazon ratings, and at the time of checking the listing was sold by a third-party seller rather than Amazon. Around $36.
4. (ISC)2 Certified in Cybersecurity (CC) Exam Guide by Hemang Doshi
Don’t let the June 2026 date fool you. Packt’s guide is the newest book here except the Sybex second edition, but its five chapters are the old domains. Chapter 2 is Business Continuity, Disaster Recovery and Incident Response, and the publisher says it reflects the 2025 exam.
What it adds is volume. You get two full 125-question mock exams with explanations, which matches the maximum length of the adaptive exam, plus topic quizzes with scenario questions and a set of flashcards. Doshi is an IT auditor who also wrote the CISA study guide we rank first in our CISA book guide, and the explanations are written for beginners.
Pair it with: the Sybex guide, when you want full-length timed mocks. Do not expect Security Governance, zero trust or AI questions in the mocks. They were written for the outline that just retired. About $32.
5. Cybersecurity For Dummies, Third Edition by Joseph Steinberg
CC is an entry-level exam with no experience requirement, and some candidates start from zero. This is the book to read before a study guide if terms like phishing, multifactor authentication and backups still feel abstract.
The third edition came out in April 2025 and replaces the 2022 second edition, which is now scarce and often pricier. It is not mapped to the exam and has no practice questions. What it gives you is the vocabulary and the reasons behind the controls, which makes the study guide far easier to absorb.
Read it first if you are a career changer or student with no security background. Pass on it if you already work in IT. You would be paying to read things you know. Often about $14.
6. Cybersecurity Essentials by Brooks, Grow, Craig and Short
The deeper foundation book. Sybex published it in 2018, and at 784 pages it covers physical security, host hardening and network defense in far more depth than any CC guide can.
It is the most reviewed book on this list, with more than 400 Amazon ratings averaging 4.7 stars, and readers describe it as a real beginner on-ramp. The age shows in the topics CC just added. Expect little on cloud, zero trust or AI.
Worth it for: readers who plan to continue past CC toward CySA+ or PenTest+ and want one solid fundamentals text. Not worth it when your only goal is passing CC this quarter. Around $23.
The books to leave on the shelf
Three traps show up in CC searches. Each one costs money or study time.
- The Sybex first edition. Same title, same author, 2024 cover without the “Second Edition” banner. It still sells through third-party sellers at ISBN 1394213832. It teaches the 2022 outline. Check the cover for “2026-2029 CC exam objectives” before you pay.
- Self-published lookalikes. Search results are full of CC “study guides” and “All-in-One” titles from no named publisher, some running to 800 or 1,000 pages for $10. One copies the McGraw Hill title almost word for word. They have no reviews, no named authors and no way to check which outline they follow.
- Cybersecurity For Dummies, second edition. The 2022 printing is scarce and often costs more than the third edition that replaced it.
The same rule applies further up the ladder. If CC leads you to CISSP, the edition check in our CISSP book guide works the same way.
Pre-purchase checklist for a CC book
- Open the table of contents. A Security Governance chapter means the 2026 outline. A Business Continuity, Disaster Recovery and Incident Response chapter means the 2022 outline.
- Look for zero trust and AI in the index. Both are tested now, and older books rarely mention either.
- Check that the networking chapters go past definitions. If ports and protocols still feel abstract, read a packet analysis book alongside, because watching traffic makes them stick.
- Confirm the seller. If Amazon is not the seller, check the edition in the listing photos.
- Count the practice questions. One guide rarely has enough for an adaptive exam, so plan on two sources.
- Book the exam before you open the book. At $199 per attempt, a fixed date keeps the study plan honest.
