Security Certifications Lead · 80 articles
Tom spent over a decade in security operations and consulting before turning to full-time exam-prep writing. He covers the big security certifications — CISSP, CISM, CISA, Security+ and the rest of the alphabet — with a soft spot for the questions everyone gets wrong. His rule for every article: if it doesn’t help you score marks, it doesn’t go in.
Twenty-five free CompTIA Security+ practice questions written to SY0-701 exam standard, split across the five domains in their real exam proportions, with a full explanation of every correct answer and every distractor.
25 Aug 2026
ReadA week-by-week AAISM study plan built around the real 31/31/38 domain split. Covers the CISM or CISSP prerequisite, how long to revise, and the scaled 450 pass mark on ISACA's 90-question AI security management exam.
25 Aug 2026
ReadTwenty CISSP practice questions written to the real April 2024 exam outline, weighted across all eight domains. Every answer comes with the reasoning the exam actually rewards, not just a letter.
24 Aug 2026
ReadTwenty SSCP practice questions written to the real ISC2 domain weightings, each with the answer and a short explanation of why the wrong options fail. Use them to find your weak domain before you book the exam.
24 Aug 2026
ReadCCST Cybersecurity costs $125 and runs 50 minutes, against $439 and 90 minutes for Security+. Here are the five exam domains, the renewal rules that changed in July 2025, and who should sit Cisco's entry-level security exam first.
22 Aug 2026
ReadFour credentials now compete for the same AI governance job adverts, and they are not interchangeable. Here is what AIGP, ISACA AAIA, ISACA AAISM and the ISO 42001 Lead Auditor route actually cost, who can sit them, and which one matches your role.
21 Aug 2026
ReadThe CRISC exam is 150 questions in four hours, scored 200 to 800, and you need 450 to pass. Here is a 12-week study plan built around the job practice that took effect on 3 November 2025, plus the answering technique that decides most results.
21 Aug 2026
ReadFour credentials dominate governance, risk and compliance hiring, and three of them will block you at the application stage if you lack the years. Here is what each GRC certification actually costs, what it tests, and the order to take them in.
20 Aug 2026
ReadA sequenced cybersecurity certification roadmap for 2026, from ISC2 CC through to CISSP and CISM. Includes the four changes this year that broke most of the roadmaps still circulating online.
19 Aug 2026
ReadAI now handles most Tier 1 alert triage, and Security+ on its own no longer clears the bar. Here is the SOC analyst certification path that actually gets you hired in 2026, tier by tier, with real costs, current exam facts and an honest verdict on every option.
12 Aug 2026
ReadMicrosoft updated the SC-900 objectives on 28 July 2026, and most study material online still teaches the old list. Here is a realistic 4-week SC-900 study plan built on the current skills measured, including the new agent ID content.
11 Aug 2026
ReadThere are 12 CompTIA stackable certifications, they cost nothing extra, and they are awarded automatically. If you hold A+, Network+ and Security+, you already earned one. Here is every stack, its exact requirements, and what happens when a prerequisite expires.
10 Aug 2026
ReadThe GCIA certification is 106 questions in 4 hours at a 67% pass mark, with CyberLive hands-on packet analysis tasks. Here is an 8-week study plan, a proven index strategy, and the tcpdump and Zeek drills that separate passes from fails.
7 Aug 2026
ReadEvery CompTIA certification you hold is on a three-year clock. Here is exactly how many CEUs each one needs, what activities count, what the fees really cost, and the renewal route that is cheaper and faster than collecting credits.
6 Aug 2026
ReadISC2's three advanced certifications stopped being CISSP concentrations, and all three got new exam outlines in August 2025. Here is how CISSP-ISSAP, ISSEP and ISSMP compare on domains, cost, eligibility and career payoff in 2026.
31 Jul 2026
ReadA day-by-day ISC2 CC study plan built around the refreshed exam outline that takes effect on 1 September 2026, including the AI security concepts now woven through all five domains and how to weight your hours against the real domain percentages.
31 Jul 2026
ReadFortinet's NSE programme changed on 15 July 2026, and NSE 4 is now the gateway to every higher level. Here is the exact exam you book, the five domain weights, and an 8-week FortiOS 7.6 study plan.
30 Jul 2026
ReadThe GCFA is 82 questions in 3 hours with a 71% pass mark and live CyberLive lab tasks. Here is an 8-week study plan, a proven index strategy, and how to handle the hands-on questions without running out of time.
29 Jul 2026
ReadYou passed OSCP. Now what? A straight comparison of OSEP, CRTO, CRTP and CPTS on cost, exam format, difficulty and what hiring managers actually pay for, so you spend your next few thousand pounds in the right place.
27 Jul 2026
ReadThe SPLK-5001 gives you 75 minutes for 66 questions on Splunk Enterprise Security. This 8-week study plan maps every blueprint domain to a week of work, with free labs, SPL drills and a realistic exam-day timing strategy.
26 Jul 2026
ReadDoD 8140 replaced the old 8570 baseline list with role based qualification, and most candidates still pick the wrong cert. Here is how to map your DCWF work role and proficiency level to a certification that actually counts in 2026.
26 Jul 2026
ReadThe TryHackMe SAL1 exam is scored out of 1000 points and you need 750 to pass, with 800 of those points coming from two live SOC Simulator scenarios. Here is an eight-week study plan and the exam-day tactics that decide whether you certify.
25 Jul 2026
ReadThe PCNSE and PCNSA are gone, replaced by a role-based framework of 15 certifications across three tracks. Here is exactly what replaces your credential, what happens when it expires, and which exam to sit next in 2026.
23 Jul 2026
ReadThe GCIH is 106 questions in 4 hours, open book, with a 69% pass mark and live CyberLive labs. Here is an 8-week study plan, a proven index-building method, and the exam-day tactics that separate passes from expensive retakes.
23 Jul 2026
ReadA week-by-week GSEC study plan for the 2026 exam, including the index-building method that decides whether you pass. Covers the new 72% pass mark, the CyberLive practical questions and the 25 objectives.
22 Jul 2026
ReadINE rebuilt the eJPT in March 2026, expanding it to 45 questions with new web app and offensive AI content. Here is a week-by-week study plan to pass the 48-hour practical on your first attempt.
22 Jul 2026
ReadCompTIA CySA+ CS0-004 went live on 23 June 2026 and the older CS0-003 retires on 22 December 2026. Here is exactly what changed, whether your old study notes still count, and which version you should sit.
18 Jul 2026
ReadISC2 is building a brand-new, vendor-neutral AI security certification with a pilot exam due in late 2026. Here is everything confirmed so far, plus how it stacks up against CompTIA SecAI+ and ISACA AAISM, and whether you should wait for it.
17 Jul 2026
ReadA week-by-week study plan to pass the CompTIA SecAI+ (CY0-001) exam on your first attempt. Covers all four domains, the performance-based questions, and how to revise the 40 percent Securing AI Systems weighting that decides most results.
17 Jul 2026
ReadGASAE is GIAC's new hands-on AI security automation certification. We break down the 10 exam domains, the CyberLive format, the cost, and whether it is worth sitting in 2026.
16 Jul 2026
ReadMicrosoft updates the SC-200 objectives on 28 July 2026, adding Sentinel Graph, KQL jobs in Data lake, summary rule tables and embedded Security Copilot. Here is an 8-week SC-200 study plan built around the new skills measured, not the old ones.
16 Jul 2026
ReadGIAC AI Platform Security (GAIPS) opens for general purchase on 28 July 2026. Here are the eight exam domains, the real cost, the CyberLive hands-on format, and an honest verdict on whether this new AI security certification is worth it.
15 Jul 2026
ReadA week-by-week SY0-801 study plan built on CompTIA's draft objectives, including the new AI content in Domain 2. Covers what is confirmed, what is still tentative, and whether you should sit SY0-701 now instead of waiting.
15 Jul 2026
ReadA week-by-week CISM study plan for 2026, built around ISACA's new Exam Content Outline that takes effect on 3 November 2026. Covers both scenarios: sitting before the change on the current outline, or sitting after it on the new one.
14 Jul 2026
ReadA week-by-week plan to pass CompTIA PenTest+ PT0-003 in 2026. Domain weights, lab setup, tooling and a realistic 8-week schedule built around the 35% Attacks and Exploits domain.
14 Jul 2026
ReadA full breakdown of the ISC2 CSSLP in 2026: the eight exam domains and their weightings, the exam format, the real cost, salary data and an honest verdict on whether the secure software cert is worth it for you.
12 Jul 2026
ReadCISSP vs CCSP in 2026 compared on domains, cost, salary and difficulty. A clear verdict on which ISC2 certification to take first, plus how the 1 August 2026 CCSP update changes the maths.
11 Jul 2026
ReadCompTIA SecAI+ and ISACA AAISM are the two flagship AI security certifications of 2026, but they are built for very different people. Here is a clear breakdown of domains, cost, prerequisites and which one actually fits your role.
9 Jul 2026
ReadThe ISC2 CCSP exam moves to a new outline on 1 August 2026, folding AI and machine-learning security into all six domains. Here is exactly what changes, whether the old or new version suits you, and how to decide if you should sit before the deadline.
9 Jul 2026
ReadFortinet is overhauling its certification programme on 15 July 2026, retiring the FCF, FCA, FCP, FCSS and FCX names for an expanded NSE 1-8 ladder. Here is what is changing, what happens to your credential, and how to prepare.
8 Jul 2026
ReadISC2 refreshes the Certified in Cybersecurity (CC) exam outline on 1 September 2026, folding AI security concepts into all five domains. Here is exactly what is changing and whether you should book CC before the deadline.
8 Jul 2026
ReadThe ISC2 SSCP is the hands-on security practitioner cert that sits between Security+ and CISSP. Here is the full 2026 breakdown: seven domains, the new CAT exam format, cost, and an honest verdict on whether it is worth it.
7 Jul 2026
ReadMicrosoft SC-730 is a new Cybersecurity Business Professional certification for non-technical staff. Here are the domains, cost, exam format and an honest verdict on whether it is worth taking in 2026.
6 Jul 2026
ReadA week-by-week CISA study plan for 2026 covering all five domains, the exam format, and the tips that get auditors through first time. Learn how to pass CISA without wasting months.
6 Jul 2026
ReadISACA is updating the CISM exam content outline on 3 November 2026, adding enterprise and information security architecture and shifting the focus to strategy. Here is exactly what is changing, how the domains move, and whether you should sit CISM before the deadline or wait.
6 Jul 2026
ReadA full breakdown of the Google Cloud Professional Cloud Security Engineer certification in 2026: exam domains, cost, format, salary and an honest verdict on whether the GCP security cert is worth it for your career.
5 Jul 2026
ReadOffSec split the OSCP into two credentials and scrapped the 10 bonus points. Here is exactly what OSCP vs OSCP+ means in 2026, how the Active Directory scoring changed, and whether the exam is now harder.
2 Jul 2026
ReadSC-401 replaced the retired SC-400 and is now Microsoft's information security admin exam. This 8-week study plan breaks down the three Purview-heavy domains, the exam format and exactly what to revise each week so you pass first time.
2 Jul 2026
ReadA full breakdown of the ISACA CRISC certification for 2026: the four updated exam domains, cost, pass mark, experience rules, salary data and an honest verdict on whether it is worth your time and money.
1 Jul 2026
ReadThe GIAC Offensive AI Analyst (GOAA) is the first major certification for offensive AI. Here is a full breakdown of the domains, the CyberLive exam format, the real cost and whether it is worth it in 2026.
30 Jun 2026
ReadCisco moves the CCNP Security 350-701 SCOR core exam from v1.1 to v2.0 on 27 August 2026, and three concentration exams retire the same day. Here is exactly what is changing and whether you should test now or wait.
30 Jun 2026
ReadA full breakdown of the ISACA AAIA (Advanced in AI Audit) certification: the three exam domains and their weightings, the real cost, the CISA prerequisite, and an honest verdict on whether it is worth it in 2026.
29 Jun 2026
ReadISACA's Advanced in AI Risk (AAIR) certification launched in April 2026. Here is the full breakdown of the three domains, the exam format, the real cost and an honest verdict on whether AAIR is worth it for risk professionals.
28 Jun 2026
ReadA complete breakdown of the Microsoft SC-900 exam in 2026: the four domains and their weights, exam cost, format, the new Security Copilot content, and an honest verdict on whether the Security, Compliance and Identity Fundamentals cert is worth your time.
27 Jun 2026
ReadCompTIA Security+ SY0-801 is due in late 2026 with dedicated AI and LLM content. Here is exactly what changes from SY0-701, who should sit which version, and whether it is worth waiting for the new exam.
27 Jun 2026
ReadCompTIA SecurityX (CAS-005) is the new name for CASP+, and it is now CompTIA's expert level security certification. Here is a full breakdown of the four domains, the real exam cost, the difficulty, how it compares to CISSP, and whether it is worth it in 2026.
26 Jun 2026
ReadISC2 slashed the CISSP experience waiver list from around 50 certifications to 25 on 1 April 2026, removing CEH, CISA, CRISC and OSCP. Here is exactly what still counts, what changed, and how to plan your CISSP path now.
26 Jun 2026
ReadSC-500 is the new Microsoft Cloud and AI Security Engineer Associate exam that replaces AZ-500. This 8-week study plan walks through every domain, the new AI security objectives and exactly how to pass on your first attempt.
24 Jun 2026
ReadCompTIA SecOT+ is the brand new operational technology security certification launching in December 2026. Here is what the exam covers, the domains, the cost, the beta timeline and an honest verdict on whether it is worth your time.
23 Jun 2026
ReadA week-by-week plan to pass the Microsoft SC-100 Cybersecurity Architect exam in 2026, built around the refreshed objectives, the four design domains and the scenario questions that catch most candidates out.
23 Jun 2026
ReadISACA's new AAISM credential is the first certification built purely for AI security management. Here are the exam domains, the real cost, the CISM or CISSP entry requirement and an honest verdict on whether it is worth it in 2026.
23 Jun 2026
ReadAZ-500 retires on 31 August 2026 and SC-500 is its replacement. This guide compares the AZ-500 vs SC-500 domains, cost, format and timing so you can choose the right Microsoft security exam and not waste a study cycle.
22 Jun 2026
ReadISACA's CCOA is a new hands-on cert for SOC analysts, built around performance-based questions and open-source tools. Here is what the exam covers, what it costs, how it compares to CySA+, and whether it is worth taking in 2026.
22 Jun 2026
ReadA realistic 12-week CISSP study plan for 2026 covering all eight domains, the CAT exam format, the manager mindset, and how to revise so you pass on your first attempt.
21 Jun 2026
ReadSC-200 vs SC-300 confuses most people choosing a Microsoft security certification. One trains you to hunt threats in a SOC, the other to control identity and access. Here is how to pick the right one in 2026.
21 Jun 2026
ReadA head-to-head comparison of CompTIA SecAI+ vs CySA+ for 2026. Cost, exam format, career outcomes, and which AI-era cybersecurity cert fits your career stage.
22 May 2026
ReadPenTest+ vs CEH compared head to head. Cost, exam format, salary outcomes, and the career situations where each penetration testing certification wins.
22 May 2026
ReadISC2 CC vs CompTIA Security+ compared head to head. Cost, exam format, employer recognition, and an honest verdict on which entry-level cybersecurity cert to take first.
22 May 2026
ReadA head-to-head comparison of CISA vs CISM in 2026. Cost, exam format, salary outcomes, and which ISACA certification fits audit vs management career paths.
22 May 2026
ReadCISSP vs CISM compared head to head: exam format, salary, career fit, and which leadership credential wins for engineers, managers, and CISO-track professionals.
22 May 2026
ReadA direct comparison of CompTIA CySA+ vs Security+ for 2026. Domain weights, exam format, salary outcomes, and the career situations where each cert wins.
22 May 2026
ReadHow hard is the CISSP exam really? An honest difficulty breakdown covering pass rates, the eight domains, CAT format quirks, and why "BEST" answers trip up so many candidates.
22 May 2026
ReadEvery dollar of the CISSP exam cost in 2026, from the $749 exam fee to AMFs, training, retakes, and study materials. Plan your budget before you commit.
22 May 2026
ReadA complete 8-week CompTIA CySA+ CS0-004 study plan covering all four domains, PBQ strategy, and the practice approach that delivers first-attempt passes for prepared candidates.
22 May 2026
ReadA realistic look at how hard CompTIA CySA+ CS0-004 is, with domain weights, question style, and a full exam-day walkthrough. Built for candidates aiming for first-attempt success.
22 May 2026
ReadA practical post-quantum cryptography cheat sheet for security pros. Covers NIST FIPS 203/204/205, CNSA 2.0 deadlines, and the exam topics you must know before 2027.
18 May 2026
ReadSecurity+ vs Google Cybersecurity Certificate compared for beginners. Learn which to take first, how employers view each, and a practical 30/60/90-day plan.
24 Apr 2026
ReadA realistic 30-day plan to pass CompTIA Security+ SY0-701 on your first attempt. Week-by-week schedule, domain-weighted focus, performance-based question drills, and the exact daily routine that works for busy professionals.
17 Apr 2026
ReadMaster the 12 performance-based scenario types on the CompTIA SecAI+ CY0-001 exam. Learn the frameworks, attack patterns, and solving strategies you need to pass.
12 Apr 2026
ReadPass CompTIA Security+ SY0-701 on your first attempt with this proven study plan. Covers all five domains, PBQ strategy, and an 8-week schedule that works.
10 Apr 2026
Read