In an ever-evolving threat landscape where security teams are increasingly battling sophisticated, AI-powered threats, the role security analysts play in protecting the digital ecosystem will only continue to grow. In ISACA’s State of Cybersecurity 2024 report, 73% of respondents expect demand for individual contributors in technical cybersecurity positions to increase in the next year. This aligns with data from the U.S. Bureau of Labor Statistics, which reports that employment of information security analysts is projected to grow 33% in the coming decade.
ISACA’s new credential, the Certified Cybersecurity Operations Analyst (CCOA), was designed to address shortcomings in today’s credentialing market, filling the gap between entry-level and intermediate training. CCOA’s hands-on training places individuals in a lab environment where they will develop techniques they will use on the job. This technical cybersecurity credential demonstrates that the learner can analyze, detect and respond to threats effectively.
CCOA focuses on the following domains: technology essentials, incident detection and response, cybersecurity principles and risks, securing assets, and adversarial tactics, techniques, and procedures. The certification is tailored for early-career professionals with 2-3 years of experience.
“Certifications play different roles at various career stages,” says Jeff Combs, cybersecurity recruiter. “For early-career professionals, they provide a structured framework for learning core principles and foundational skills. A robust, peer-reviewed curriculum created by industry practitioners can be an invaluable tool for building expertise. While it’s still relatively new, ISACA’s CCOA certification appears to be a promising option for professionals with a couple of years of experience who are focused on cybersecurity operations.”
Technical skills are increasingly in-demand, and a shortage of skilled professionals can leave organizations vulnerable and contribute to a growing internal problem of technical debt. This is driving the demand for specialists with cybersecurity skills. With its hands-on lab simulations placing learners in scenarios that reflect real cybersecurity tasks, CCOA can help early-career professionals stand out and attain several popular roles in the security field, including cybersecurity analyst, information security analyst, SOC analyst, vulnerability analyst, and incident response analyst. After initially being available through a successful beta program in 2024, CCOA officially launched this month.
“CCOA’s labs are a game-changer,” says Marian Illovsky, audit partner and co-founder at Cyllium Group, and a participant in the CCOA beta program. “This is a credential that is very appropriate for its time. CCOA will help me distinguish myself to clients because it shows a combination of knowledge and hands-on skill. This credential will really help people be perceived differently by hiring managers, clients and employers.”
With cybersecurity analysts named one of the in-demand cybersecurity jobs in 2025, CCOA will help early-career professionals and those aiming to advance in a highly competitive market.
“The CCOA certification provides practical skills and knowledge for excelling in threat analysis, incident response, and security operations,” says Jean Menard, adjunct instructor at the School of Cybersecurity and Information Technology, University of Maryland Global Campus, and a participant in the CCOA beta program. “Its focus on real-world scenarios bridges the gap between theory and practice, making it highly relevant to today’s cybersecurity challenges. The CCOA’s training has enhanced my ability to address evolving cyber threats and strengthened my career prospects.”
To learn more about the CCOA credential, visit www.isaca.org/credentialing/ccoa. For more information about all of ISACA’s credentialing offerings, visit www.isaca.org/credentialing.
