-

ISACA Introduces Certified Cybersecurity Operations Analyst (CCOA) Credential

From the creator of CISA and CISM comes a new certification providing cybersecurity analysts with experience-based learning to validate skills in responding to evolving cyber threats

SCHAUMBURG, Ill.--(BUSINESS WIRE)--ISACA’s State of Cybersecurity survey report found that the two top factors for determining qualified candidates for jobs are prior hands-on experience (73 percent) and credentials held (38 percent). To help employers find qualified candidates and help cybersecurity professionals demonstrate their hands-on cybersecurity skills, ISACA has launched its Certified Cybersecurity Operations Analyst (CCOA) credential, which provides hands-on, performance-based labs that simulate real-world scenarios and leverage today’s technologies.

ISACA introduces Certified Cybersecurity Operations Analyst (#CCOA) credential.

Share

Advancing cybersecurity skills

Cybersecurity professionals face a complex and challenging threat landscape, with 38 percent of organizations experiencing increased cybersecurity attacks compared to a year ago, according to the State of Cybersecurity report. And as emerging technologies like AI evolve, the role of the cyber analyst will only become more critical in protecting digital ecosystems. ISACA’s CCOA focuses on the technical skills analysts need to advance their careers to the next level.

Designed for cybersecurity professionals with a few years of experience, CCOA enables cyber analysts to gain a deeper understanding of how to identify and respond to cyber threats, perform vulnerability assessments, and provide guidance on industry best practices for securing assets—enhancing and validating their skills and knowledge to set them apart to future employers.

Focused on both technical and regulatory readiness and addressing the latest cybersecurity challenges, from AI-driven attacks to regulatory compliance, CCOA covers these globally validated key domains: cybersecurity principles and risks; adversarial tactics, techniques, and procedures; incident detection and response; and securing assets.

Valuable hands-on experience

This experience-based component equips cybersecurity analysts with skills that can be used on the job, preparing them to tackle evolving cyber challenges and demonstrate their technical abilities effectively.

“Cybersecurity professionals are often expected to have years of hands-on experience, even when they are early in their careers,” says Shannon Donahue, ISACA chief content and publishing officer. “Being able to demonstrate to peers and prospective employers a mastery of on-the-job tasks, as well as a wide breadth of knowledge and experience in both business and technical skills, can give candidates a competitive advantage in a tighter job market and a boost in getting to that next step in their profession.”

Along with the CCOA online review course—which includes one year of exam prep access to allow for time to master skills—the related materials accompanying the new credential also include a Questions, Answers, and Explanations Database (QAE) and CCOA Review Manual (available both in print and digital formats).

With a long history offering credentialing and training offerings, including Certified Information Systems Auditor (CISA) and Certified Information Security Manager (CISM), ISACA is committed to serving IT and IS professionals wherever they are in their career journeys. CCOA offers a step toward advancing in a cybersecurity career path, including pursuing CISM in the future. If choosing that route, CCOA exam passers earn a one-year educational waiver toward the CISM exam.

Learn more about CCOA at www.isaca.org/credentialing/ccoa, and about the benefits and key domains of the credential at this infographic here. More information about ISACA’s other credentials can be found at www.isaca.org/credentialing.

About ISACA

ISACA® (www.isaca.org) is a global community advancing individuals and organizations in their pursuit of digital trust. For more than 50 years, ISACA has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA is a global professional association and learning organization that leverages the expertise of its 180,000+ members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 228 chapters worldwide. Through the ISACA Foundation, ISACA supports IT education and career pathways for underresourced and underrepresented populations.

X: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews

Contacts

communications@isaca.org
Emily Ayala, +1.847.385.7223
Bridget Drufke, +1.847.660.5554

ISACA


Release Versions
Hashtags

Contacts

communications@isaca.org
Emily Ayala, +1.847.385.7223
Bridget Drufke, +1.847.660.5554

Social Media Profiles
More News From ISACA

ISACA Study: Almost Half of Women in Tech Have Experienced Gender Discrimination in the Workplace

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Almost half (47 percent) of women in tech have experienced gender discrimination in the workplace, an increase of 5 percentage points from 2024, according to ISACA’s new 2026 Tech Workplace and Culture survey. This kind of discrepancy is felt in women’s everyday working life in other ways as well. Women report lower satisfaction in various areas compared to men, including workplace culture (52 percent for women, compared to 65 percent for men), job security (5...

ISACA’s 2026 Virtual Conference Examines Risks and Opportunities of AI and Quantum

SCHAUMBURG, Ill.--(BUSINESS WIRE)--As technology, risk and regulation continue to evolve at unprecedented speed, ISACA’s 2026 Virtual Conference will equip technology professionals with the insights and connections to lead with confidence.Taking place online from 1-3 December, ISACA’s Virtual Conference covers a range of IS/IT areas, with sessions exploring timely topics including AI governance, agentic AI, cyber resilience, quantum-safe encryption, AI-enabled audit and compliance, third-party r...

Only 8 Percent of Organizations Conduct Regular AI-Specific Response Exercises, ISACA Research Finds

SCHAUMBURG, Ill.--(BUSINESS WIRE)--With rogue AI model behavior in the news recently, new research from ISACA finds concerning news about AI security. While AI is being heavily leveraged within cybersecurity teams, only eight percent of organizations indicate they conduct AI-specific response exercises regularly, according to ISACA’s 2026 State of Cybersecurity report, which surveyed more than 1,800 cybersecurity professionals across the globe. AI incident response planning lags, even as AI tra...
Back to Newsroom