Security Certifications Lead · 45 articles
Tom spent over a decade in security operations and consulting before turning to full-time exam-prep writing. He covers the big security certifications — CISSP, CISM, CISA, Security+ and the rest of the alphabet — with a soft spot for the questions everyone gets wrong. His rule for every article: if it doesn’t help you score marks, it doesn’t go in.
A full breakdown of the ISC2 CSSLP in 2026: the eight exam domains and their weightings, the exam format, the real cost, salary data and an honest verdict on whether the secure software cert is worth it for you.
12 Jul 2026
ReadCISSP vs CCSP in 2026 compared on domains, cost, salary and difficulty. A clear verdict on which ISC2 certification to take first, plus how the 1 August 2026 CCSP update changes the maths.
11 Jul 2026
ReadCompTIA SecAI+ and ISACA AAISM are the two flagship AI security certifications of 2026, but they are built for very different people. Here is a clear breakdown of domains, cost, prerequisites and which one actually fits your role.
9 Jul 2026
ReadThe ISC2 CCSP exam moves to a new outline on 1 August 2026, folding AI and machine-learning security into all six domains. Here is exactly what changes, whether the old or new version suits you, and how to decide if you should sit before the deadline.
9 Jul 2026
ReadFortinet is overhauling its certification programme on 15 July 2026, retiring the FCF, FCA, FCP, FCSS and FCX names for an expanded NSE 1-8 ladder. Here is what is changing, what happens to your credential, and how to prepare.
8 Jul 2026
ReadISC2 refreshes the Certified in Cybersecurity (CC) exam outline on 1 September 2026, folding AI security concepts into all five domains. Here is exactly what is changing and whether you should book CC before the deadline.
8 Jul 2026
ReadThe ISC2 SSCP is the hands-on security practitioner cert that sits between Security+ and CISSP. Here is the full 2026 breakdown: seven domains, the new CAT exam format, cost, and an honest verdict on whether it is worth it.
7 Jul 2026
ReadMicrosoft SC-730 is a new Cybersecurity Business Professional certification for non-technical staff. Here are the domains, cost, exam format and an honest verdict on whether it is worth taking in 2026.
6 Jul 2026
ReadA week-by-week CISA study plan for 2026 covering all five domains, the exam format, and the tips that get auditors through first time. Learn how to pass CISA without wasting months.
6 Jul 2026
ReadISACA is updating the CISM exam content outline on 3 November 2026, adding enterprise and information security architecture and shifting the focus to strategy. Here is exactly what is changing, how the domains move, and whether you should sit CISM before the deadline or wait.
6 Jul 2026
ReadA full breakdown of the Google Cloud Professional Cloud Security Engineer certification in 2026: exam domains, cost, format, salary and an honest verdict on whether the GCP security cert is worth it for your career.
5 Jul 2026
ReadOffSec split the OSCP into two credentials and scrapped the 10 bonus points. Here is exactly what OSCP vs OSCP+ means in 2026, how the Active Directory scoring changed, and whether the exam is now harder.
2 Jul 2026
ReadSC-401 replaced the retired SC-400 and is now Microsoft's information security admin exam. This 8-week study plan breaks down the three Purview-heavy domains, the exam format and exactly what to revise each week so you pass first time.
2 Jul 2026
ReadA full breakdown of the ISACA CRISC certification for 2026: the four updated exam domains, cost, pass mark, experience rules, salary data and an honest verdict on whether it is worth your time and money.
1 Jul 2026
ReadThe GIAC Offensive AI Analyst (GOAA) is the first major certification for offensive AI. Here is a full breakdown of the domains, the CyberLive exam format, the real cost and whether it is worth it in 2026.
30 Jun 2026
ReadCisco moves the CCNP Security 350-701 SCOR core exam from v1.1 to v2.0 on 27 August 2026, and three concentration exams retire the same day. Here is exactly what is changing and whether you should test now or wait.
30 Jun 2026
ReadA full breakdown of the ISACA AAIA (Advanced in AI Audit) certification: the three exam domains and their weightings, the real cost, the CISA prerequisite, and an honest verdict on whether it is worth it in 2026.
29 Jun 2026
ReadISACA's Advanced in AI Risk (AAIR) certification launched in April 2026. Here is the full breakdown of the three domains, the exam format, the real cost and an honest verdict on whether AAIR is worth it for risk professionals.
28 Jun 2026
ReadA complete breakdown of the Microsoft SC-900 exam in 2026: the four domains and their weights, exam cost, format, the new Security Copilot content, and an honest verdict on whether the Security, Compliance and Identity Fundamentals cert is worth your time.
27 Jun 2026
ReadCompTIA Security+ SY0-801 is due in late 2026 with dedicated AI and LLM content. Here is exactly what changes from SY0-701, who should sit which version, and whether it is worth waiting for the new exam.
27 Jun 2026
ReadCompTIA SecurityX (CAS-005) is the new name for CASP+, and it is now CompTIA's expert level security certification. Here is a full breakdown of the four domains, the real exam cost, the difficulty, how it compares to CISSP, and whether it is worth it in 2026.
26 Jun 2026
ReadISC2 slashed the CISSP experience waiver list from around 50 certifications to 25 on 1 April 2026, removing CEH, CISA, CRISC and OSCP. Here is exactly what still counts, what changed, and how to plan your CISSP path now.
26 Jun 2026
ReadSC-500 is the new Microsoft Cloud and AI Security Engineer Associate exam that replaces AZ-500. This 8-week study plan walks through every domain, the new AI security objectives and exactly how to pass on your first attempt.
24 Jun 2026
ReadCompTIA SecOT+ is the brand new operational technology security certification launching in December 2026. Here is what the exam covers, the domains, the cost, the beta timeline and an honest verdict on whether it is worth your time.
23 Jun 2026
ReadA week-by-week plan to pass the Microsoft SC-100 Cybersecurity Architect exam in 2026, built around the refreshed objectives, the four design domains and the scenario questions that catch most candidates out.
23 Jun 2026
ReadISACA's new AAISM credential is the first certification built purely for AI security management. Here are the exam domains, the real cost, the CISM or CISSP entry requirement and an honest verdict on whether it is worth it in 2026.
23 Jun 2026
ReadAZ-500 retires on 31 August 2026 and SC-500 is its replacement. This guide compares the AZ-500 vs SC-500 domains, cost, format and timing so you can choose the right Microsoft security exam and not waste a study cycle.
22 Jun 2026
ReadISACA's CCOA is a new hands-on cert for SOC analysts, built around performance-based questions and open-source tools. Here is what the exam covers, what it costs, how it compares to CySA+, and whether it is worth taking in 2026.
22 Jun 2026
ReadA realistic 12-week CISSP study plan for 2026 covering all eight domains, the CAT exam format, the manager mindset, and how to revise so you pass on your first attempt.
21 Jun 2026
ReadSC-200 vs SC-300 confuses most people choosing a Microsoft security certification. One trains you to hunt threats in a SOC, the other to control identity and access. Here is how to pick the right one in 2026.
21 Jun 2026
ReadA head-to-head comparison of CompTIA SecAI+ vs CySA+ for 2026. Cost, exam format, career outcomes, and which AI-era cybersecurity cert fits your career stage.
22 May 2026
ReadPenTest+ vs CEH compared head to head. Cost, exam format, salary outcomes, and the career situations where each penetration testing certification wins.
22 May 2026
ReadISC2 CC vs CompTIA Security+ compared head to head. Cost, exam format, employer recognition, and an honest verdict on which entry-level cybersecurity cert to take first.
22 May 2026
ReadA head-to-head comparison of CISA vs CISM in 2026. Cost, exam format, salary outcomes, and which ISACA certification fits audit vs management career paths.
22 May 2026
ReadCISSP vs CISM compared head to head: exam format, salary, career fit, and which leadership credential wins for engineers, managers, and CISO-track professionals.
22 May 2026
ReadA direct comparison of CompTIA CySA+ vs Security+ for 2026. Domain weights, exam format, salary outcomes, and the career situations where each cert wins.
22 May 2026
ReadHow hard is the CISSP exam really? An honest difficulty breakdown covering pass rates, the eight domains, CAT format quirks, and why "BEST" answers trip up so many candidates.
22 May 2026
ReadEvery dollar of the CISSP exam cost in 2026, from the $749 exam fee to AMFs, training, retakes, and study materials. Plan your budget before you commit.
22 May 2026
ReadA complete 8-week CompTIA CySA+ CS0-004 study plan covering all four domains, PBQ strategy, and the practice approach that delivers first-attempt passes for prepared candidates.
22 May 2026
ReadA realistic look at how hard CompTIA CySA+ CS0-004 is, with domain weights, question style, and a full exam-day walkthrough. Built for candidates aiming for first-attempt success.
22 May 2026
ReadA practical post-quantum cryptography cheat sheet for security pros. Covers NIST FIPS 203/204/205, CNSA 2.0 deadlines, and the exam topics you must know before 2027.
18 May 2026
ReadSecurity+ vs Google Cybersecurity Certificate compared for beginners. Learn which to take first, how employers view each, and a practical 30/60/90-day plan.
24 Apr 2026
ReadA realistic 30-day plan to pass CompTIA Security+ SY0-701 on your first attempt. Week-by-week schedule, domain-weighted focus, performance-based question drills, and the exact daily routine that works for busy professionals.
17 Apr 2026
ReadMaster the 12 performance-based scenario types on the CompTIA SecAI+ CY0-001 exam. Learn the frameworks, attack patterns, and solving strategies you need to pass.
12 Apr 2026
ReadPass CompTIA Security+ SY0-701 on your first attempt with this proven study plan. Covers all five domains, PBQ strategy, and an 8-week schedule that works.
10 Apr 2026
Read