ISACA's first fully technical, hands-on credential — a lab-based certification for SOC analysts who detect and respond to live attacks, not the auditors and governance leaders its other certifications are built for.
CCOA is ISACA's answer to a real gap: a certification that proves you can operate a SOC, not just audit one. The exam weights Incident Detection and Response at 34% — by far the heaviest domain — because ISACA built this credential around the actual job: spotting an intrusion, tracing Adversarial Tactics, Techniques, and Procedures back to their source, and shutting it down before it spreads. Layer in Technology Essentials, Cybersecurity Principles and Risk, and Securing Assets, and the credential covers the full technical range a working SOC analyst is expected to own. For anyone on the security operations floor, or trying to get there, CCOA is the fastest way to make that hands-on capability visible to a hiring manager.
Self-paced access, AI Coach on every lesson, full-length practice exams, and a free course retake if you complete the readiness gate and still don't pass your exam on the first attempt. Exam registration and voucher are purchased separately, directly through the certifying body.
See the full curriculum100% self-paced online — study on your schedule, no bootcamp seat to book.
Training a whole team on CCOA? Fund a Training Bank account for any amount, then assign any course to any employee — self-serve, published discount tiers, no sales call.
Set up your team account
