Certification guide for IIBA CCA, including official exam scope, route fit, current availability, and the best current PM Mastery alternatives while dedicated practice is not yet live.
On this page
CCA is IIBA’s Certificate in Cybersecurity Analysis. Use this page when your target is cybersecurity analysis through a business-analysis lens rather than only pure technical security certification.
PM Mastery does not have dedicated CCA web practice yet. Use this page to review the official exam scope, route fit, and the best current PM Mastery alternatives before dedicated practice is live.
CCA exam snapshot
Provider: International Institute of Business Analysis (IIBA)
Official exam name: Certificate in Cybersecurity Analysis (CCA)
What IIBA says CCA is assessing
business-analysis depth in cybersecurity contexts
specialist analysis capability for cyber-focused roles and decisions
BA work where cyber risk and control context materially matter
Who CCA is for
analysts working with cybersecurity initiatives, controls, or governance
candidates comparing CCA with broader BA routes or technical cybersecurity certifications
professionals whose work sits between business analysis and cyber decision-making
Why candidates choose CCA
CCA is usually the better fit when your work sits between cybersecurity decisions and business-analysis structure rather than pure technical security operations.
It works well when you need an analysis credential that reflects cyber risk, controls, and business impact together.
It is the right comparison point for CISSP or Security+ when your role is analysis-led rather than engineer-led.
What CCA is really testing
whether you can apply business-analysis discipline inside cybersecurity contexts
whether cyber requirements and stakeholder needs are understood through an analysis lens
whether you can bridge business and cyber reasoning without drifting into pure technical certification framing