
Cisco changed its security certifications twice in 2026. On February 3 the CyberOps credentials became CCNA Cybersecurity and CCNP Cybersecurity, and on August 27 the CCNP Security core exam moved to SCOR v2.0 as three concentration exams retired. The version change does not invalidate an active credential. Study material bought before August may be out of date, though.
The four security credentials Cisco offers now
| Certification | Exams | Time | Price |
|---|---|---|---|
| CCNA Cybersecurity | 200-201 CCNACBR | 120 minutes | $300 |
| CCNP Cybersecurity | 350-201 CBRCOR core, plus 300-215 CBRFIR or 300-220 CBRTHD | 120 minutes, then 90 | $400, then $300 |
| CCNP Security | 350-701 SCOR v2.0 core, plus SNCF, SISE, SSCA or SDSI | 120 minutes, then 90 | $400, then $300 |
| CCIE Security | SCOR as the qualifying exam, then the v6.1 lab | 8-hour lab | $1,600 for the lab |
Cisco certifications last three years. Renewal takes 30 continuing education credits at the associate level, 80 at the professional level and 120 for a CCIE, or you can pass exams again. Every CCNP exam you pass also earns a Cisco Certified Specialist certification. Cisco doesn't publish passing scores for any of them.
CyberOps is now CCNA and CCNP Cybersecurity
Cisco announced the rename in May 2025, along with its move from the Cisco Certifications brand to Learn with Cisco, and it took effect on February 3, 2026. The exams kept their numbers. The associate exam is still 200-201, now labeled CCNACBR rather than CBROPS. The professional track still pairs the CBRCOR core with either a forensics and incident response concentration (CBRFIR) or a threat hunting one (CBRTHD). Cisco recognized anyone holding an active CyberOps or Cybersecurity certification at the matching CCNA or CCNP level, so there was nothing to apply for.
The rename matters most on a résumé. A recruiter filtering for "CCNA" will now find security operations analysts as well as network engineers, and the networking CCNA (200-301) tests quite different material. Write the full name, CCNA Cybersecurity, so nobody mistakes one for the other. For where the associate credential fits in a SOC career, see our SOC analyst progression.
SCOR v2.0 and a shorter concentration list
SCOR v1.1 had its last day on August 26, 2026, and v2.0 started the next day. Cisco calls it the first major revision since the exam launched in February 2020. It adds a Secure Service Edge domain, large language model risks, Splunk and post-quantum cryptography; the CCNP Security study guide has the new weights.
Four concentration exams left the list this year. SAUTO (300-735) retired on February 2, 2026, and SVPN (300-730), SESA (300-720) and SWSA (300-725) followed in August. Cisco moved the VPN material into SCOR and SNCF. Email and web security got no replacement exam. SCAZT kept its 300-740 number and became SSCA, centered on Cisco Secure Access, and Cisco's exam pages now list both SNCF and SISE at version 1.2. That leaves four ways to finish the certification: SNCF for Secure Firewall, SISE for Identity Services Engine, SSCA for Secure Access and SDSI for security design.
A v1.1 pass still counts. Cisco's August 27 question-and-answer post says it combines with any current concentration, including one sat after the switch, and the three-year window between core and concentration still applies.
What Cisco has said is coming
- An official SCOR practice exam by the end of 2026, and a single SNCF course replacing the two five-day firewall courses later in the year.
- An hour-long CCIE lab module called AI Deploy, Operate and Optimize, in which candidates use an AI assistant for configuration, troubleshooting and code. The Design module shrinks from three hours to two to make room. Cisco's May 20, 2026 post dates only the Data Center track: exam topics in November 2026, the module live at Cisco Live US in 2027.
- No date for the AI module in CCIE Security, whose lab is still v6.1.
What to do this month
If you're working toward CCNP Security, check that every resource says v2.0. The second edition of the SCOR Official Cert Guide was written for v1.1, so keep the v2.0 exam topics list beside it and fill the gaps from Cisco's documentation. If you'd planned on SVPN, SESA or SWSA, choose another concentration; SNCF is the natural home for firewall VPN work. If you hold a CyberOps credential, update its name on your résumé and profiles. The lab you'd book for CCIE Security today is v6.1, and Cisco hasn't said when that changes. Other vendors' network security credentials are covered in the network security certifications overview.
Sources
- Cisco Blogs: Learn with Cisco, Evolving for the Age of AI, Automation, and Cloud (May 27, 2025): CCNA and CCNP Cybersecurity from February 3, 2026, automatic recognition of CyberOps holders, checked October 2026
- Cisco: 200-201 CCNACBR exam: exam name, 120 minutes, $300, CCNA Cybersecurity, checked October 2026
- Cisco: CCNA Cybersecurity: certification name, three-year validity, checked October 2026
- Cisco: CCNP Cybersecurity exams and training: CBRCOR, CBRFIR and CBRTHD, durations and prices, checked October 2026
- Cisco: CCNP Security: core and four concentrations, durations, prices, Specialist certifications, checked October 2026
- Cisco Blogs: Cisco Security Certification Updates, Your Questions Answered (August 27, 2026): SCOR v2.0 dates, SVPN retirement, SCAZT renamed SSCA, v1.1 compatibility, practice exam and SNCF course plans, checked October 2026
- Cisco: Retired exams: SAUTO, SVPN, SESA and SWSA retirements, CBROPS and 200-301 CCNA references, checked October 2026
- Cisco: 300-710 SNCF: version 1.2, checked October 2026
- Cisco: 300-715 SISE: version 1.2, checked October 2026
- Cisco: Recertification: three-year validity, 30, 80 and 120 continuing education credits, checked October 2026
- Cisco: CCIE Security exams and training: lab v6.1, SCOR qualifying exam, 8 hours, $1,600, checked October 2026
- Cisco Blogs: AI-Led Updates Across Cisco Certification Portfolio (May 20, 2026): AI Deploy, Operate and Optimize module, Design module shortened, Data Center timeline, checked October 2026