Skip to content
News and updates

Cisco's Security Certifications After SCOR v2.0 and the CyberOps Rename

Cisco's security credentials as of October 2026: CyberOps renamed CCNA and CCNP Cybersecurity, SCOR v2.0 live, four CCNP Security concentrations left.

RB
Rachel Brown
Security Researcher
Published
Updated
Read time
4 min
On this page

Cisco's Security Certifications After SCOR v2.0 and the CyberOps Rename

Cisco changed its security certifications twice in 2026. On February 3 the CyberOps credentials became CCNA Cybersecurity and CCNP Cybersecurity, and on August 27 the CCNP Security core exam moved to SCOR v2.0 as three concentration exams retired. The version change does not invalidate an active credential. Study material bought before August may be out of date, though.

The four security credentials Cisco offers now

CertificationExamsTimePrice
CCNA Cybersecurity200-201 CCNACBR120 minutes$300
CCNP Cybersecurity350-201 CBRCOR core, plus 300-215 CBRFIR or 300-220 CBRTHD120 minutes, then 90$400, then $300
CCNP Security350-701 SCOR v2.0 core, plus SNCF, SISE, SSCA or SDSI120 minutes, then 90$400, then $300
CCIE SecuritySCOR as the qualifying exam, then the v6.1 lab8-hour lab$1,600 for the lab

Cisco certifications last three years. Renewal takes 30 continuing education credits at the associate level, 80 at the professional level and 120 for a CCIE, or you can pass exams again. Every CCNP exam you pass also earns a Cisco Certified Specialist certification. Cisco doesn't publish passing scores for any of them.

CyberOps is now CCNA and CCNP Cybersecurity

Cisco announced the rename in May 2025, along with its move from the Cisco Certifications brand to Learn with Cisco, and it took effect on February 3, 2026. The exams kept their numbers. The associate exam is still 200-201, now labeled CCNACBR rather than CBROPS. The professional track still pairs the CBRCOR core with either a forensics and incident response concentration (CBRFIR) or a threat hunting one (CBRTHD). Cisco recognized anyone holding an active CyberOps or Cybersecurity certification at the matching CCNA or CCNP level, so there was nothing to apply for.

The rename matters most on a résumé. A recruiter filtering for "CCNA" will now find security operations analysts as well as network engineers, and the networking CCNA (200-301) tests quite different material. Write the full name, CCNA Cybersecurity, so nobody mistakes one for the other. For where the associate credential fits in a SOC career, see our SOC analyst progression.

SCOR v2.0 and a shorter concentration list

SCOR v1.1 had its last day on August 26, 2026, and v2.0 started the next day. Cisco calls it the first major revision since the exam launched in February 2020. It adds a Secure Service Edge domain, large language model risks, Splunk and post-quantum cryptography; the CCNP Security study guide has the new weights.

Four concentration exams left the list this year. SAUTO (300-735) retired on February 2, 2026, and SVPN (300-730), SESA (300-720) and SWSA (300-725) followed in August. Cisco moved the VPN material into SCOR and SNCF. Email and web security got no replacement exam. SCAZT kept its 300-740 number and became SSCA, centered on Cisco Secure Access, and Cisco's exam pages now list both SNCF and SISE at version 1.2. That leaves four ways to finish the certification: SNCF for Secure Firewall, SISE for Identity Services Engine, SSCA for Secure Access and SDSI for security design.

A v1.1 pass still counts. Cisco's August 27 question-and-answer post says it combines with any current concentration, including one sat after the switch, and the three-year window between core and concentration still applies.

What Cisco has said is coming

  • An official SCOR practice exam by the end of 2026, and a single SNCF course replacing the two five-day firewall courses later in the year.
  • An hour-long CCIE lab module called AI Deploy, Operate and Optimize, in which candidates use an AI assistant for configuration, troubleshooting and code. The Design module shrinks from three hours to two to make room. Cisco's May 20, 2026 post dates only the Data Center track: exam topics in November 2026, the module live at Cisco Live US in 2027.
  • No date for the AI module in CCIE Security, whose lab is still v6.1.

What to do this month

If you're working toward CCNP Security, check that every resource says v2.0. The second edition of the SCOR Official Cert Guide was written for v1.1, so keep the v2.0 exam topics list beside it and fill the gaps from Cisco's documentation. If you'd planned on SVPN, SESA or SWSA, choose another concentration; SNCF is the natural home for firewall VPN work. If you hold a CyberOps credential, update its name on your résumé and profiles. The lab you'd book for CCIE Security today is v6.1, and Cisco hasn't said when that changes. Other vendors' network security credentials are covered in the network security certifications overview.

Sources