October 23, 2026 | Alberta

A beginner can earn ISC2 Certified in Cybersecurity (CC) or CompTIA Security+ first, but not the Certified Information Systems Security Professional (CISSP). CISSP requires five years of security work experience, so it belongs later in a career, even though it shows up in job postings that beginners read.

For most people starting out in Alberta, the real choice is between CC and Security+. Both changed in 2026, so older comparisons may be out of date. Here's what each certification requires today and how to sequence them.

CISSP vs CC vs Security+ at a Glance

The Canadian Centre for Cyber Security's certification guide, last updated in May 2026, doesn't endorse any certification, but it labels Security+ entry-level and CISSP advanced-level. Its ISC2 section doesn't include CC.

In practice, Security+ is the only one of the three you can earn without experience that also counts toward CISSP later. That makes it the bridge between where beginners start and where CISSP holders end up.

Can a Beginner Earn the CISSP?

No. You can write the CISSP exam without experience, but you won't hold the CISSP until you can document five years of cumulative, full-time work in at least two of the eight CISSP domains, according to ISC2's experience requirements.

Beginners usually meet CISSP through one of two rules:

• Associate of ISC2: Pass the exam without the experience and you become an Associate of ISC2, with six years to earn the five years required. Associates pay a US$50 annual maintenance fee in the meantime.
• One-year waiver: A bachelor's or master's degree in computer science, IT, or a related field, or one credential from ISC2's approved list, can replace one year. Only one year can be waived.

ISC2 revised the approved list effective April 1, 2026. CompTIA Security+, CompTIA CySA+, and Cisco CCNA are on the current list. CC and CompTIA PenTest+ are not. A diploma isn't a bachelor's or master's degree, so for diploma graduates, the credential route is the one that applies.

Alberta's career data points the same way. The ALIS Systems Security Analyst profile, linked to NOC 21220 (cybersecurity specialists), names CISSP among common designations and says most employers prefer "several years' experience and relevant certifications." In practice, when CISSP appears in an Alberta job posting, it usually signals an experienced role, not an entry point.

ISC2 CC in 2026: What Changed

CC is ISC2's entry-level certification, and it requires no work experience. Two 2026 changes matter if you're considering it:

• The free exam program closed. ISC2's One Million Certified in Cybersecurity program stopped taking new enrolments on May 20, 2026. Existing exam codes must be used by December 31, 2026, and the standard exam fee is US$199.
• The exam content is new. A new CC exam outline took effect September 1, 2026, the first major content update since CC launched in 2022. It adds a Security Governance domain and expands identity and access management, cloud security, and incident response.

What this means: older guides may still describe CC as free, so budget for the fee. CC is a low-stakes way to test your interest and learn security vocabulary. It doesn't count toward the CISSP waiver, though, so treat it as a warm-up rather than a substitute for Security+.

Security+: The Practical First Target for Most Beginners

Security+ has no mandatory prerequisites. CompTIA recommends Network+ and about two years in a security or systems administrator role, but that's guidance, not a requirement.

Version timing matters right now:

In practice, if you plan to write Security+ before June 2027, you can choose either version. After June 11, 2027, English candidates will write SY0-801. Match your study materials to the version you'll actually sit.

Security+ is also the starting point for the next CompTIA tier. Our breakdown of Security+, CySA+, and PenTest+ explains how the three build on each other.

Which Certification Should You Earn First?

For most beginners, Security+ is the strongest first target, and CC is optional. Your starting point decides the rest:

Watch for these sequencing mistakes:

• Assuming CC reduces CISSP's experience requirement. It doesn't.
• Assuming a diploma qualifies for the degree waiver. ISC2 specifies a bachelor's or master's.
• Stacking several approved credentials to cut more than one year. Only one waiver applies.
• Starting SY0-701 study too close to its June 11, 2027 retirement.

How CDI College Can Help You Prepare Your Beginner Certifications

CDI College's Cybersecurity Specialist program in Alberta helps students prepare for certification exams in six areas. Three of them also count toward CISSP's one-year experience waiver later.

What the program includes:

• Length: 76 weeks and 1,595 hours.
• Networking base: A+, Network+, and two CCNA-aligned courses, the foundation CompTIA recommends before Security+. Our guide to Network+ vs CCNA explains how the two differ.
• Security courses: Security+, Risk Identification and Mitigation, Cybersecurity Analyst CySA+, Penetration Testing, and Advanced Security.
• Practical component: A 175-hour practicum or a 175-hour capstone project.

Keep two things in mind. The program doesn't prepare students for CC or CISSP. And certifications matter before graduation: CDI College notes that students without industry certifications may be denied a practicum site.

These figures come from the 2023 Alberta Wage and Salary Survey, which reports wages by occupation, not by certification. For the full pathway, read our step-by-step guide to becoming a cybersecurity specialist in Alberta.

Final Thoughts

You can't start with CISSP, but you can start building toward it. For most beginners, Security+ is the first certification worth earning, because it's open to people without experience and counts toward CISSP later. CC is a reasonable warm-up if you're still exploring, as long as you budget for the fee.

Request more information about CDI College's Cybersecurity Specialist program, admission requirements, financial options and start dates.