M.S. Cybersecurity & Information Assurance — everything the community knows, everything WGU gives you, and every CEU you can squeeze out of it.
Community-sourced from r/WGU, r/WGUCyberSecurity, r/WGU_Accelerators, student writeups, and official WGU + cert-body documentation. Compiled August 2026; updated October 2026 for WGU’s June 2026 program guide.
☕ Buy me a coffee — this guide is free and always will be; coffee funds the updates when WGU changes the catalog again.
⚠️ Read this first — what this guide is, and what it isn’t
This is an independent, privately created and maintained guide. It is not produced, reviewed, endorsed, or authorized by Western Governors University in any way.
A large portion of it is community-derived — real students’ posts, course writeups, completion reports, and screenshots of their own degree plans — combined with publicly available official documentation. Community reports can be out of date, specific to one student’s catalog version, or simply wrong. And WGU changes things constantly: this program’s catalog changed in August 2026, tuition changes annually, and cert rosters shift with vendor relationships. An earlier WGU program-guide PDF shipped with at least one mapping error that students caught (the June 2026 version fixes it).
Treat everything here as a starting point for a better conversation with WGU — not as an authoritative answer. Before you make any decision that costs money or time (enrolling, transferring a certification, sitting an exam, planning a term), confirm it directly with:
- WGU Admissions / your Enrollment Counselor — wgu.edu/admissions (use the contact options on that page) — for anything about admission, transfer credit, or cost.
- Your Program Mentor — the authority on your degree plan, your catalog version, and which courses you personally need.
- The official program guide — MSCSIA program guide.
Every section below links its sources so you can verify anything yourself. Where something is community-reported rather than officially confirmed, it’s labeled as such. If you find something wrong, please say so — corrections make this better for everyone behind you.
⚠️ Catalog note: WGU revised the MSCSIA in August 2026. The current version (Catalog 202610) is an 11-course, 36-CU program that added three new E-series courses and dropped the ISC2 CC. Most community writeups you’ll find cover the 2023–2025 version (10 courses, 34 CUs, D481/D486 instead of E123/E122/E121). D-series course advice still applies — those carried over — but always check codes against your degree plan. Existing students choose whether to stay or migrate (community thread with insider detail).
Coming from the bachelor’s side, or planning your path? Companion guides: BSCSIA Field Guide · BSIT Field Guide.
Official pages: Program page · Program guide · Program guide PDF (Catalog 202610)
The shape of it: 11 courses, 36 competency units (CUs), 6-month flat-rate terms, competency-based (pass = demonstrated B-or-better mastery; no GPA). Recommended 4-term plan; on-time progress requires 8 CUs per term (also the graduate full-time threshold for financial aid and VA benefits). 63% of graduates finish within 18 months — and the acceleration community routinely does it in 1–2 terms.
Cost: $4,925 tuition + $200 e-books/resource fee = $5,125 per 6-month term (rates effective Jan 1, 2026; new rates announced effective Oct 1, 2026 — check the current table). You pay per term, not per course: finishing faster literally costs less.
| # | Code | Course | CUs | Assessment | Cert |
|---|---|---|---|---|---|
| 1 | E123 | Cybersecurity Fundamentals | 2 | PA (reported) | — |
| 2 | D482 | Secure Network Design | 3 | PA | — |
| 3 | D487 | Secure Software Design | 3 | OA | — |
| 4 | D483 | Security Operations | 4 | Cert exam | CompTIA CySA+ (included) |
| 5 | D485 | Cloud Security | 4 | PA + Azure lab | — |
| 6 | D484 | Penetration Testing | 4 | Cert exam | CompTIA PenTest+ (included) |
| 7 | D488 | Cybersecurity Architecture & Engineering | 4 | OA | CompTIA SecurityX (optional voucher) |
| 8 | E122 | Human-Centric Risk in Cybersecurity | 2 | TBD (new) | — |
| 9 | D489 | Cybersecurity Management | 4 | PA | ISACA CISM (optional voucher) |
| 10 | E121 | Governance, Risk & Compliance in the Age of AI | 2 | TBD (new) | ISACA AAISM (optional voucher) |
| 11 | D490 | Cybersecurity Graduate Capstone | 4 | 3-task PA | — |
What changed in the Aug 2026 revision (from the community thread with WGU-insider participation, cross-checked against the PDF):
From WGU’s Catalog 202610 program guide (published June 1, 2026). Exceptions need approval, so plan around it:
| Step | Course(s) | Rule |
|---|---|---|
| 1 | E123 Cybersecurity Fundamentals · D482 Secure Network Design | Foundational: prerequisites to all remaining chain courses |
| 2 | D483 Security Operations (CySA+) | Before step 3 |
| 3 | D484 Penetration Testing (PenTest+) · D485 Cloud Security | Both before step 4 |
| 4 | D488 Cybersecurity Architecture and Engineering | Before step 5 |
| 5 | D489 Cybersecurity Management | Before E121 |
| 6 | E121 Governance, Risk, and Compliance in the Age of AI | All prerequisites above must be met |
| Last | D490 Cybersecurity Graduate Capstone | Every other course must be complete |
| Anytime | D487 Secure Software Design · E122 Human-Centric Risk in Cybersecurity | No prerequisites. Take them whenever they fit |
What this means for planning: the chain only branches at step 3, so the two floating courses are your pressure valve. Pre-study D487 before day one and knock it out early, or slot it (and E122) in while you wait on a cert exam date or an evaluation. Transferring in CySA+ or PenTest+ removes links from the middle of the chain, which is exactly why cert transfers save so much time here.
Certs summary: included at no extra cost — CySA+, PenTest+ (each voucher covers the exam twice, per WGU’s cert page). Optional vouchers — SecurityX, CISM, AAISM (whether “optional voucher” means WGU-paid on opt-in isn’t spelled out publicly; confirm with your mentor). Note ISACA/ISC2 may require separate membership fees for cert maintenance even when the exam is covered.
Unlike the bachelor’s programs, the master’s has no external-coursework shortcut. The lever here is certifications you already hold and how much you pre-study before day one.
gantt
title MSCSIA - three realistic paths from day zero to diploma
dateFormat YYYY-MM-DD
axisFormat %b %Y
todayMarker off
section A. Traditional
Apply and enroll :a0, 2026-09-01, 30d
Term 1 :a1, 2026-10-01, 180d
Term 2 :a2, after a1, 180d
Term 3 :a3, after a2, 180d
section B. Cert transfers
Earn CySA plus PenTest :b0, 2026-09-01, 120d
Apply and enroll :b1, after b0, 45d
Term 1 :b2, after b1, 180d
Term 2 :b3, after b2, 120d
section C. Fully accelerated
Certs plus D487 pre-study :c0, 2026-09-01, 150d
Apply and enroll :c1, after c0, 45d
Term 1 - finish :c2, after c1, 40d
| Path | Who it fits | Pre-enrollment work | Terms paid | Wall-clock | Approx. tuition |
|---|---|---|---|---|---|
| A. Traditional | Working full-time, no transferable certs, learning as you go | None | ~3 | ~18 months | ≈$15,375 |
| B. Cert transfers | Willing to sit CySA+ and PenTest+ first (~$1,280 with academic pricing) | 4 months of cert study | ~2 | ~16 months | ≈$10,250 + certs |
| C. Fully accelerated | Experienced practitioner; holds or earns CySA+/PenTest+/CISM, pre-reads D487 | 5-month sprint | 1 | ~8 months | ≈$5,125 + certs |
Documented real timelines (community, not official): 21 days (BSCSIA alum with heavy transfers), 33 days (8-year practitioner, 4 transfers), 3.5 months, 5 months (half the CUs cleared), 15 months (3 terms, full-time job, certs from scratch), 18 months (no transfers, full-time job — and still a win).
All of these people graduated. Pick the pace that fits your life — and note the counterpoint from a 3.5-month finisher: don’t rush past the learning, because burnout costs more time than it saves.
(Program page) You need ONE of:
No GRE/GMAT. No résumé/experience waiver — transcripts are verified before admission. Community note: WGU can be strict when experience isn’t cleanly documented (DegreeForum thread).
Graduate transfer credit at WGU is limited — but the MSCSIA does clear specific courses for specific certs you already hold. The authoritative mapping: partners.wgu.edu — MSCSIA transfer pathways (a dynamic page — open it in a normal browser; the 33-day finisher called this link out by name as his planning tool).
Community-confirmed clears (verify current mappings on that page — the catalog just changed):
Rules of the road: you can transfer at most 50% of program CUs, and maxing out cert-clears reaches roughly 44% under the new catalog (community calculation in the new-program thread). Confirm the current cap with an enrollment counselor — graduate transfer policy differs from the undergraduate 75% rule.
Should you earn certs BEFORE enrolling? The math one planner posted (thread): CompTIA academic-store bundles (voucher + retake + CertMaster) for Net+/Sec+/SecurityX/CySA+/PenTest+ cost him $1,280 with academic pricing and a promo code, vs. ~$3,300 list. If pre-clearing those courses lets you finish in one term instead of two, you save $5,125 — the certs pay for themselves. Counterpoint: if you’d rather not front the cash, the program gives you CySA+/PenTest+ vouchers (two attempts each) inside tuition. Either way, study the cert objectives before day one. Academic pricing: CompTIA Academic Store.
If you’ve read the BSCSIA or BSIT guides — or you’re a WGU bachelor’s alum — you already know the single biggest accelerator at the undergraduate level: clear a pile of courses on Sophia Learning or Study.com for ~$99/month before you ever enroll.
That does not work here. Sophia and Study.com courses are ACE-evaluated at the lower-division undergraduate level. They cannot satisfy graduate-level requirements at WGU or anywhere else. Neither platform publishes a WGU graduate pathway, and WGU’s own partner transfer tools are undergraduate-only. Don’t buy a subscription expecting it to help with the MSCSIA.
What actually replaces it at the graduate level:
| Undergrad lever | Graduate equivalent |
|---|---|
| Sophia/Study.com course transfers | Industry certifications that map to courses (Section 4.2) — CySA+, PenTest+, CISM |
| CLEP/DSST exams | Nothing equivalent — no graduate credit-by-exam |
| Cheap gen-ed clearing | Pre-studying during the free 1–3 month application-to-start window (Section 4.4) |
| 75% transfer cap | ~50% cap (verify current policy with your counselor) |
The practical consequence: your money is better spent on certification vouchers than on any subscription platform. A $1,280 cert bundle that clears three courses is the graduate-level version of a $600 Sophia run that clears ten.
Starts are the 1st of every month. (Admissions · checklist)
| When | Do |
|---|---|
| Anytime | Apply (get the fee waiver code from your counselor). Request transcripts — WGU offers a free transcript-gathering service. |
| ~90 days out | Scholarship window opens. Start pre-studying (D487 book; CySA+/PenTest+ objectives; or sit certs to transfer). |
| 1st of month before start | Transcripts (and military transcripts if using TA) must be in. |
| 15th of month before | All admission requirements met to keep your start date. |
| 22nd of month before | Payment/financial aid finalized. |
| Before start | “Commit to Start” docs → orientation course → first Program Mentor call (bring your roadmap). |
Your Program Mentor controls which courses get opened and how fast. In the new catalog, with its official near-linear prerequisite chain, that control matters more than it used to, because you can’t route around a slow activation by working ahead on something else.
Copy the block below, fill in the blanks, and email it to your mentor before your first call. Then use it as the standing agenda for weekly check-ins.
WGU MSCSIA — Student Roadmap
Name: Student ID:
Program start date: Target graduation:
Program Mentor: Prepared:
────────────────────────────────────────────────
1. MY SITUATION
────────────────────────────────────────────────
Hours/week I can realistically commit: hrs
Work schedule / constraints:
Years of security/IT experience:
Certifications I already hold (+ date earned):
Certs I transferred in: CU of 36
Courses remaining: of 11
FIRST QUESTIONS FOR MY MENTOR:
1. Am I on Catalog 202610 (11 courses, E121/E122/E123)
or the prior catalog (10 courses, D481/D486)?
2. If prior — should I migrate? What changes?
3. D487 and E122 have no prerequisites. Can I keep one
of them open alongside the chain course I'm on?
────────────────────────────────────────────────
2. MY TARGET PACE
────────────────────────────────────────────────
I am aiming for the ______________ path:
[ ] Traditional — ~3 terms, steady
[ ] Cert transfers — ~2 terms
[ ] Fully accelerated — 1 term (needs prior certs)
CUs I intend to complete this term: CU
(Graduate full-time = 8 CU/term; must pass 3+ CU in
term one to keep financial aid)
Courses I want opened THIS TERM, in order:
1. ______________________ target complete: ____
2. ______________________ target complete: ____
3. ______________________ target complete: ____
4. ______________________ target complete: ____
────────────────────────────────────────────────
3. WHAT I'M ASKING YOU FOR
────────────────────────────────────────────────
[ ] Open my next course the SAME DAY I pass the current
one — added courses cost nothing extra, and in a
linear chain any delay is pure lost time.
[ ] Confirm which optional vouchers I qualify for
(SecurityX, CISM, AAISM), when I can claim them,
and how long each voucher stays valid.
[ ] Connect me with the Course Instructor for D482 and
D490 early — I want a pre-review before I submit.
[ ] Flag anything in my plan where the program guide or
online writeups won't match my actual catalog.
[ ] Hold me accountable: if I miss two weekly targets in
a row, tell me directly rather than letting it slide.
────────────────────────────────────────────────
4. WEEKLY CHECK-IN FORMAT (5 minutes)
────────────────────────────────────────────────
• Last week's target: Hit? Y / N
• This week's target:
• Blocked on:
• Next course to open:
• Exam / PA submission scheduled:
────────────────────────────────────────────────
5. CERT EXAM + PA CALENDAR
────────────────────────────────────────────────
CySA+ (D483) target date: ______
PenTest+ (D484) target date: ______
SecurityX (optional) target date: ______
CISM (optional) target date: ______
AAISM (optional) target date: ______
^ NOTE: AAISM is only AWARDED if I hold an active
CISM or CISSP. Sequence CISM first.
D490 Capstone Task 1 (topic approval): ______
D490 Task 2: ______
D490 Task 3: ______
^ NOTE: Task 1 needs instructor sign-off and can't
fully clear until other courses are done. Start
the topic conversation EARLY.
NOTE: CompTIA enforces a 14-day wait after two failed
attempts. Never schedule a first attempt in the final
3 weeks of a term.
────────────────────────────────────────────────
6. RISKS I'M FLAGGING NOW
────────────────────────────────────────────────
Courses I expect to be hardest for me:
Weeks I'll be unavailable (travel, work crunch, family):
My capstone topic idea (run it by my instructor early):
My personal early-warning sign that I'm falling behind:
Why this works: it converts the mentor relationship from reactive (“how’s it going?”) to operational. The capstone line matters most — Task 1 requires instructor sign-off and is the single most common place MSCSIA students stall. Starting that conversation in week one, not month five, is worth weeks.
Skip this if you’re a WGU alum; read it twice if you’re new.
Competency-based, flat-rate terms. You pass courses by proving competency (equivalent to a B or better — transcripts show pass, no GPA). A term is 6 months, costs the same whether you finish 8 CUs or 36, and courses can be added free once you clear the scheduled ones. No lectures, no seat time, no set order within your unlocked courses (the new catalog is more linear — see Section 2).
Three kinds of faculty:
Two kinds of assessment:
Academic integrity — know exactly where the line is. (Policy · Assessment security resource)
Study materials, yes. Assessment materials, no.
A note on what’s in this section: in line with WGU’s academic-integrity policy, this section deliberately does not describe the content of any WGU-authored assessment — no task prompts, no exam topics/questions, no rubric specifics, no task structure. What it does cover: whether a course is PA, OA, or a third-party cert exam (already in the Section 2 table), community-reported time ranges, and publicly available third-party prep resources (textbooks, practice-exam vendors, hands-on-lab platforms). For what a course actually covers, use WGU’s own program guide, and once you’re enrolled, your Course Instructor’s cohort sessions and FAQ docs — that’s the legitimate, WGU-sanctioned way to get task-specific clarity. Time estimates are community reports from experienced practitioners — scale up if you’re newer.
Each entry below links the official catalog description — the page in WGU’s public Institutional Catalog PDF (August 2026) where that course’s real WGU-authored description lives (pp. 265–330 is the full course-description index, alphabetized by code). Catalogs reissue every few months and codes/pages shift — if the link or page number doesn’t match what you see, WGU has published a newer edition; search wgu.edu/about/institutional-catalog.html for the current one.
Official course description: WGU Institutional Catalog, p. 330
Replaces D481. Brand new to the Aug 2026 catalog — no community writeups yet. Check the course’s own announcements and cohort recordings once you’re enrolled, and consider posting the first community writeup for the students behind you.
Official course description: WGU Institutional Catalog, p. 295
Time: 3 days–2 weeks, community-reported. General tips: watch the course’s cohort videos and use its FAQ doc; read the rubric line by line and answer every bullet explicitly rather than aiming for a page count; ask your Course Instructor for a pre-review before you submit. Free Visio comes with your Azure for Students benefits if the course involves any network diagramming (Section 10).
Official course description: WGU Institutional Catalog, p. 295
Time: 1–3 days with prep. This is the course most finishers pre-study before their start date, since it’s OA-based and built around a known textbook — identify it early and read ahead if you can. General tip: use the course’s own review-question set and pre-assessment as your diagnostic, and study only what you actually miss rather than re-reading everything.
Official course description: WGU Institutional Catalog, p. 295
You pass this course by passing CompTIA’s CySA+ (CS0-003) exam; WGU’s voucher covers two attempts. This and D484 are the two courses experienced students most often clear via cert transfer, since the pass condition is a full external certification exam rather than a WGU-authored assessment — CompTIA publishes its own exam objectives, so studying for it isn’t a gray area. Community-recommended prep stack: Sybex CySA+ Study Guide (Chapple/Seidl) + Jason Dion practice exams + PocketPrep — most students use CertMaster only as much as needed to clear WGU’s voucher-eligibility gate, not as primary instruction. Sequencing tip: many students study CySA+ and PenTest+ back-to-back since CompTIA’s own objectives overlap.
Official course description: WGU Institutional Catalog, p. 295
Time: 2–5 days with prior cloud experience, 1–2 weeks without. General tips: the hands-on Azure lab environment has a known session time limit and can be slow to work with — do any practice labs and Microsoft Learn Azure walkthroughs beforehand so you’re not learning the platform and the material at the same time, and screenshot your progress as you go. Use the course’s own Task Guide and pacing guide for what’s actually required.
Official course description: WGU Institutional Catalog, p. 295
You pass the core of this course via CompTIA’s PenTest+ exam, plus a shorter written component. Time: 2.5–6 weeks community-reported for students without prior pentesting background. Prep stack: Sybex PenTest+ (Chapple) + Jason Dion exams + PocketPrep, plus TryHackMe for hands-on practice (20% student discount) — CompTIA’s own published exam objectives are your authoritative reference. Ride any CySA+ momentum straight into this one; the fundamentals overlap.
Official course description: WGU Institutional Catalog, p. 295
Passing this course banks an optional CompTIA SecurityX voucher (valid roughly a year) — several grads sit SecurityX after graduating rather than during the term. Time: 1–4 days community-reported if CySA+/PenTest+ material is still fresh. General tip: community consensus is to study from a CASP+/SecurityX guide rather than relying on CertMaster as primary instruction, since the OA is a WGU-authored exam, not the SecurityX exam itself.
Official course description: WGU Institutional Catalog, p. 330
Brand new to the Aug 2026 catalog — no community intel yet. Check the course’s own announcements and cohorts, and post the first writeup.
Official course description: WGU Institutional Catalog, p. 295
Time: a couple of days community-reported for an experienced writer. General tip: this course leans on specific industry-standard publications that are required reading regardless of the assignment — write directly from those primary sources rather than from memory or outside summaries, and keep your answer format consistent across sections. Grads consistently rate this course the most job-relevant in the program. If you already hold CISM, the whole course transfers. CISM prep: ISACA Official Review Manual + QAE question database. ISACA student membership is $25/year and gives 30% off exam registration — worth setting up before you register for anything ISACA.
Official course description: WGU Institutional Catalog, p. 330
Replaces D486. Aligned to ISACA’s AAISM (Advanced in AI Security Management) — note that AAISM is only awarded to active CISM or CISSP holders (ISACA), so sequence D489/CISM first if you want the credential to actually issue once you pass. Community coverage is thin since this is a new course — lean on the course’s own materials and cohort recordings.
Official course description: WGU Institutional Catalog, p. 295
Widely reported as the longest course in the program for most students, with a wide range of finish times depending largely on how quickly your topic gets instructor sign-off. Talk to your Course Instructor before you write anything — Task 1 requires their approval and generally can’t fully clear until your other coursework is further along, so starting that conversation in week one, not month five, is one of the highest-leverage things you can do in this program. Browse the Model Capstone Archive (via WGU’s blog) for real passing examples before you pick a topic.
The MSCSIA funds CySA+ and PenTest+ outright, plus optional vouchers for SecurityX, CISM, and AAISM. That’s a strong roster — but there are meaningful gaps, and your coursework covers the material for several certs WGU won’t buy.
⚠️ Verify prices before you pay. Cert prices move and promos expire. Prices below link to their official sources; several could not be confirmed on the vendor’s own page and are marked accordingly.
ISACA student membership is $25/year and gives 30% off exam registration, plus discounts on prep materials and access to ISACA’s free fundamental certificates. If you’re going anywhere near CISM, CISA, CRISC, or AAISM, set this up before you register for anything. On a $760 non-member CISA registration that’s a meaningful saving on a single exam.
For ISC2: the Candidate program is free for year one, then $50/yr — but note it discounts study materials, courses, and events, and is not confirmed to discount the exam fee itself. Don’t budget around an exam discount there.
WGU funds CISM but not CISSP — and CISSP is the credential most commonly named in senior security job postings. The MSCSIA covers a large share of its domains, and the community path is well-trodden: several grads chained D488 → SecurityX → CISSP within weeks of graduating, while the material was still hot (example).
The experience workaround most people miss: CISSP requires 5 years of relevant experience, but you can sit and pass the exam first and become an Associate of ISC2 while you accumulate it — you’re credentialed on your résumé immediately, at a $50/year maintenance fee. If you’re career-changing into security via this degree, that’s the move.
| Cert | Issuer | Cost | Why | Link |
|---|---|---|---|---|
| CISSP | ISC2 | ~$749 (not vendor-confirmed — verify) | The gap in WGU’s roster; Associate-of-ISC2 path lets you pass before you have the experience | isc2.org/certifications/cissp |
| CCSP | ISC2 | ~$599 (not vendor-confirmed) | Pairs directly with D485 Cloud Security while it’s fresh | isc2.org/certifications/ccsp |
| CISA | ISACA | $575 member / $760 non-member | The audit-track counterpart to the CISM WGU funds — genuinely additive, not overlapping. Apply the $25 student membership first | isaca.org/credentialing/cisa |
| CRISC | ISACA | (not confirmed; expect the same $575/$760 pattern) | Risk/GRC counterpart — pairs with E121/E122 | isaca.org/credentialing/crisc |
| GIAC GFACT / GISF | GIAC/SANS | $399 / $499 standalone | The affordable entry to the GIAC ladder — most GIAC certs are $999 standalone | giac.org/pricing |
| Your course | Adjacent cert | Cost | Why | Link |
|---|---|---|---|---|
| E121 / E122 (AI + GRC) | AWS Certified AI Practitioner | $100, or ~$50 with an AWS 50%-off voucher | Directly tests generative-AI, responsible-AI, and prompt-engineering concepts your new AI-focused courses cover | aws.amazon.com |
| D485 Cloud Security | AWS Certified Cloud Practitioner | $100 | MSCSIA does not include any AWS cert (that’s the BSIT program) — a genuine gap you can close cheaply | aws.amazon.com |
| D485 Cloud Security | Microsoft AZ-900 / SC-900 | ~$99 each (verify) | D485’s lab is Azure-based — you’re already learning the platform. Free AZ-900 study guide · free SC-900 guide | learn.microsoft.com |
| D482 / D483 | Fortinet NSE 1–3 / FCF | Free — training and certificate | Costs nothing but an afternoon | fortinet.com/training-certification |
The AWS mechanics worth knowing: pass any AWS certification and you unlock a 50%-off voucher toward your next AWS exam (official benefits page). So two AWS foundational certs run ~$150 total, not $200.
There’s also a live promo — AWS/Pearson VUE’s AIF2CLOUD: register for AI Practitioner at 50% off (~$50), pass by Sept 30, 2026, and receive a complimentary Cloud Practitioner attempt (pass by Nov 30, 2026). (promo page) That’s two AWS certs for ~$50 — and since MSCSIA includes no AWS cert at all, it’s the single best value on this page. Check whether it’s still live before planning around it; if expired, fall back to the permanent 50%-off benefit.
❌ Correction to a tip you’ll still see repeated: ISC2’s “One Million Certified in Cybersecurity” program gave a free CC exam and training. It closed to new enrollments on May 20, 2026 (official announcement). Existing code holders can test through Dec 31, 2026. New candidates now pay $199 + $50/yr. Guides and Reddit posts still calling it free are out of date.
You’re paying $5,125 a term. Every link below is direct — no searching required. (Student resources hub)
| Resource | What it is | Link |
|---|---|---|
| Udemy Business | Full catalog while enrolled — gone at graduation, so binge accordingly. Jason Dion’s practice exams often live here | Via your WGU student portal |
| LinkedIn Learning, Skillsoft Percipio, MindEdge | Included | Via your WGU student portal |
| CompTIA CertMaster Learn/Labs/Practice | Embedded in the cert courses (with the 90% voucher gate — see D483) | Product overview |
| WGU Library | Databases, journals, 24/7 Ask-a-Librarian, 1:1 research appointments — capstone citations without paywalls | Student resources |
| Writing Center / Academic Coaching | APA 7 help, live events, 24/7 chat — cheap insurance for a PA-heavy program | Via student portal |
| WellConnect | Free confidential 24/7 counseling, plus legal and financial consultations | Via student portal — use it, you already paid for it |
| Handshake + Career Services for Life | Jobs, advisors by college, résumé/interview prep, virtual career fairs — continues post-graduation (careers@wgu.edu) | wgu.edu careers |
The quiet gold: every course hides its best materials in plain sight — cohort recordings, task guides, FAQ docs, and pacing guides posted by course instructors. Graduates repeatedly credit these over the official textbooks. Check the course announcements/community tab first, every course.
| Program | What you get | Eligibility | Direct link |
|---|---|---|---|
| Microsoft Azure for Students | $100 credit, no credit card required, 12mo free services + 65 always-free, dev licenses including Visio (which D482 wants) and Windows Education | Student email verification | azure.microsoft.com/free/students |
| GitHub Student Developer Pack | JetBrains all-products (free/yr), GitHub Pro + Copilot, 1Password 1yr free, Datadog Pro 2yr, Namecheap domain + SSL, DigitalOcean credit, Azure $100 | School email or dated proof of enrollment | education.github.com/pack |
| Microsoft 365 Education (A1) | Free web versions of Word/Excel/PowerPoint/Outlook/OneNote. (Desktop apps need paid A3/A5 — A1 is web-only.) | Verified education email; can take weeks | microsoft.com/education/products/office |
| AWS Educate | Free training, labs, digital badges, job board. ⚠️ No AWS credits — common misconception | Any email, 13+ | aws.amazon.com/education/awseducate |
| AWS Skill Builder | 600+ free courses incl. cert prep | Free tier: none | skillbuilder.aws |
| Google Cloud for Students | 200 Skills Boost credits, 1-year expiry | Application-based | cloud.google.com/edu/students |
| TryHackMe student | 20% off annual Premium — directly useful for D484 | Set Occupation = Student in account settings | tryhackme.com/students · how-to |
| Hack The Box Academy student | Discounted Academy subscription (price shown after verification) | Institutional email or student ID upload | HTB student sub guide |
| LetsDefend | 50% off VIP with a .edu email (~$8.50/mo effective) | .edu registration | letsdefend.io |
| CompTIA Academic Store | Student pricing on vouchers/bundles via SheerID — this is how the 1-term planner got 5 cert bundles for $1,280 instead of $3,300 | SheerID verification | academic-store.comptia.org |
| ISACA student membership | $25/yr → 30% off exam registration — set up before any CISM/CISA/CRISC/AAISM exam | Student verification | isaca.org/membership/student-hub |
| Resource | What | Link |
|---|---|---|
| Microsoft Learn | Free Azure paths — genuinely useful prep for D485’s Azure lab. AZ-900 · SC-900. ⚠️ AI-900 was renamed AI-901 in April 2026 | learn.microsoft.com |
| Splunk free courses | Free self-paced SIEM training — good context for D483/CySA+ | splunk.com/training/free-courses |
| Blue Team Labs Online | Free tier: security challenges + downloadable PCAPs, memory dumps, phishing samples | blueteamlabs.online |
| CyLab Security Academy | ⚠️ picoCTF rebranded here in May 2026. 500+ free CTF challenges | learn.cylabacademy.org/challenge-library |
| OverTheWire | Free SSH wargames, no signup | overthewire.org/wargames |
| Professor Messer | Free courses for the CompTIA ladder, if you’re shoring up fundamentals: Security+ SY0-701 | professormesser.com |
| Resource | What’s in it | Link |
|---|---|---|
| Paul Jerimy’s Security Certification Roadmap | The canonical visual map of every security cert by specialization and level — the single best free tool for planning what comes after the MSCSIA | pauljerimy.com/security-certification-roadmap |
| AWS Certifications Wiki | Community-maintained: pathways, vouchers & discounts, programs, study resources, badges | awscertifications.github.io/AWSCertificationsWiki |
| r/WGUCyberSecurity wiki | Program-specific community knowledge base | old.reddit.com/r/WGUCyberSecurity/wiki/index |
| r/WGU wiki | University-wide | old.reddit.com/r/WGU/wiki/index |
| Subreddits | r/WGU · r/WGUCyberSecurity · r/WGUIT · r/WGU_Accelerators | — |
⚠️ Avoid commercial “WGU accelerator” answer sites. Several sites market themselves as WGU course “solutions.” They sell assessment content, which is an academic-integrity violation that can get you expelled.
| Tool | Cost | Link |
|---|---|---|
| PocketPrep | Freemium; premium ~$15–20/mo. Covers CySA+, PenTest+, SecurityX and more | pocketprep.com |
| Anki | Free desktop + Android; paid one-time on iOS | apps.ankiweb.net · shared decks |
| Jason Dion | Prices fluctuate | Udemy profile · Dion Training (also sells discounted CompTIA vouchers) |
Dedicated Military Support office (va@wgu.edu, 1-877-435-7948 x3127), virtual veterans resource center, part-time pacing options, 14× Military Friendly School.
Between Udemy, LinkedIn Learning, Skillsoft, CertMaster, Jason Dion, PocketPrep, TryHackMe, Hack The Box, Microsoft Learn, ISACA’s QAE database, Anki, and YouTube, you have access to more high-quality training than you could finish in a decade. Variety is genuinely valuable — different platforms teach differently, and hands-on labs cement what video can’t. But unmanaged variety is just a very sophisticated form of procrastination.
The failure mode is specific: you start a CySA+ course, hit a hard domain, and instead of pushing through you “supplement” with a different course, then a YouTube playlist, then a TryHackMe room. Four platforms, four partial completions, one unpassed exam. It feels like studying. It isn’t progress.
For each course you’re taking, assign exactly one resource to each of these five roles, write them down, and don’t add a sixth:
| Role | What it does | Pick exactly one |
|---|---|---|
| 1. Primary instruction | Teaches the material start to finish | The Sybex book, a Dion course, or the WGU course material |
| 2. Question bank | Tells you what you don’t know | PocketPrep, Dion practice exams, or (for CISM) ISACA’s QAE database |
| 3. Hands-on | Makes it stick | TryHackMe, HTB Academy, or your Azure for Students sandbox |
| 4. Spaced repetition | Retains it | Anki (built from published exam objectives only) |
| 5. Authoritative reference | Settles disputes | The vendor’s official exam objectives PDF, or the NIST publication the course is built on |
Five slots. Fill them before you start the course. If a resource isn’t in a slot, you don’t open it until the course is passed.
Week 1 Primary instruction, first pass, 1.5x speed, no notes
Week 1 end Question bank COLD -> find your weak domains
Week 2 Re-study ONLY weak domains + hands-on labs for those
Week 2 Anki deck built from your actual misses
Week 3 Question bank again -> target 85%+ consistently
Week 3 Schedule the exam. Then sit it.
The most important line is “question bank cold.” Most people study everything evenly and waste 60% of their hours on material they already knew. WGU’s pre-assessment does the same job for OA courses — take it day one, before studying, always.
This program is unusually lopsided, so this matters more here than in the bachelor’s:
This degree is a continuing-education goldmine for certs you already hold. Two engines run simultaneously: courses you complete and new certs you earn inside the program.
Golden habit: the day you pass any WGU course, save three things to a folder: (1) your unofficial transcript showing the course + completion date, (2) the course description/syllabus, (3) the completion date. That one bundle satisfies the documentation rules of CompTIA, ISC2, ISACA, GIAC, and EC-Council simultaneously.
Golden rule: an activity only counts toward the renewal cycle that’s open when you complete it. Time big-ticket items (a 45-CPE course, a new cert) to land in the cycle that needs them.
Portal: login.comptia.org → Manage Certifications → Continuing Education → Add CEUs. Submission how-to (each activity is a separate submission; max 5 files/1MB per upload). Submissions auto-accept but are randomly audited.
Requirements (per 3-year cycle): A+ 20 · Network+ 30 · Security+ 50 · CySA+ 60 · PenTest+ 60 · SecurityX 75. CE fees: $150/3yr for Network+ and above, $75/3yr for A+ — you only pay for your highest cert; the rest renew free with it (fees page).
Engine 1 — the auto-renew chain (zero paperwork, zero fees): earning a higher CompTIA cert automatically renews everything below it (renewal options):
So simply progressing through the MSCSIA resets your entire CompTIA stack at least twice, free.
Engine 2 — courses as CEUs: each completed college course counts for 10 CEUs (3–4 credit hours; ≥50% of content must map to the target cert’s objectives). Upload the transcript + course description (higher-education page). Eleven MSCSIA courses ≈ 100+ CEUs of raw material — more than enough to renew SecurityX (75) even without Engine 1.
Engine 3 — non-CompTIA certs as CEUs: a CISM earned in D489 is on the pre-approved list for full renewal of Security+ (50/50 CEUs) and counts heavily for others; same for CISSP (pre-approved lists). Cert must be earned/renewed within your open cycle; upload the cert or badge link (score reports don’t count). CE fees still apply on this path.
Portal: cpe.isc2.org. Requirements (3-year cycle): CISSP 120 (min 60 Group A) · SSCP 60 · CCSP 90 · CC 45. AMF $135/yr (covers all your ISC2 certs; $50 for CC-only). (CPE Handbook)
How WGU work counts: graduate cybersecurity coursework is a Group A education activity at 1 CPE per hour of work, in 0.25 increments, max 40 CPEs per single activity. There’s no fixed per-degree formula — submit each course as its own activity with the hours you actually spent (a 4-CU course legitimately runs 30–40+ hours even accelerated). Eleven courses submitted separately can plausibly cover an entire CISSP cycle’s Group A minimum and then some. Steps: Submit CPE → Group A → pick the relevant domain (required or it sits in draft) → describe the course, date, hours. Keep evidence 12 months past cycle end for audit. Bonus: Group A hours earned in your cycle’s last 6 months can roll over. ISC2 magazine quizzes (2 CPEs each) and auto-posting webinars fill any gaps.
Portal: isaca.org/myisaca → Certifications & CPE Management → Report and Manage CPE. Requirements: 20 CPE/year minimum + 120 per 3-year cycle; maintenance $45/yr member, $85 non-member (maintain CISM).
The headline rate: university courses earn 15 CPE per semester credit hour (CPE policy). A single 3-CU WGU course ≈ 45 CPE; a 4-CU course ≈ 60. One relevant MSCSIA course can cover an entire year’s minimum twice over, and university coursework has no category cap. This is the most generous coursework rate of any body — if you hold CISM/CISA/CRISC, the MSCSIA basically retires your CPE problem for a full cycle. Also: passing any related professional exam = 2 CPE per exam hour (a 165-minute CompTIA exam ≈ 5–6 CPE, uncapped category). Process: self-report each course (name, provider = WGU, date, hours, which cert it applies to). Nothing uploads unless you’re audited — keep the transcript+syllabus bundle 12 months past cycle end.
Portal: your giac.org account → “Log My CPEs.” Requirement: 36 CPEs per 4-year cycle per cert (renewal KB, pricing).
How WGU work counts: each graduate course (3–5 credit hours) = 12 CPEs, under Career Development (category cap 36, applicable to up to 3 GIAC certs). Documentation: syllabus + transcript (post-graduate KB). Translation: three WGU courses = a complete GIAC renewal. The MSCSIA contains eleven.
Portal: aspen.eccouncil.org. Requirement: 120 ECE credits/3 years + $80/yr membership (ECE policy). How WGU work counts: higher education = 15 credits per semester course; passing any non-EC-Council cert = 40 credits — so CySA+ + PenTest+ + CISM earned in-program = a full 120-credit cycle by themselves.
| You hold | The program gives you | Effort beyond transcripts |
|---|---|---|
| Security+/Network+/A+ | Auto-renewed (twice) by CySA+/PenTest+, again by SecurityX — fee-free | None — automatic |
| CySA+ or PenTest+ (prior) | Auto-renewed by SecurityX; or 10 CEUs/course + CISM as CEUs | Minutes per submission |
| SecurityX (prior) | 10 CEUs per qualifying course (75 needed) + CISM pre-approved CEUs | Upload transcript + syllabus per course |
| CISSP/SSCP/CCSP/CC | Each course = Group A CPEs at 1/hr (≤40 each); 11 courses ≈ a full cycle | Log hours at cpe.isc2.org |
| CISM/CISA/CRISC | 45–60 CPEs per course (15/credit-hour); exams at 2 CPE/hr | Self-report at myisaca |
| Any GIAC cert | 12 CPEs per course, 36 caps a renewal → 3 courses = done | Log at giac.org/account |
| CEH | 15 credits/course + 40 per new cert → one term ≈ full cycle | Log at Aspen |
Program page · Program guide PDF (Catalog 202610, June 2026) · Cert-transfer mapping · IT tuition · Included certifications · Admissions · Enrollment checklist · Transfers · Scholarships · Cybersecurity Scholarship · Military · Tuition Assistance · Student resources · Cyber community/clubs · Alumni benefits · PA tips blog · Capstone archive announcement · Academic Integrity policy · Assessment security resource
MSCSIA completed — 18 months, no transfers · 21 days after BSCSIA transfers · 33 days, full playbook · New MSCSIA program (Aug 2026 changes) · Rhino’s 3.5-month finish · Journey begun — instructor pre-review tip · Excellence Award grad · MSCSIA→SecurityX→CISSP in one month · D482 tips · D485 tips · D486 tips · D489 tips · CySA+ CertMaster gate · Capstone: struggling to start · Capstone venting 1 · 2 · Eval turnaround · 1-term plan + cert bundle pricing · CISSP ≠ D489 clear · First-term structure · WGU courses as CompTIA CEUs (r/WGU)
My Cyber Journey — per-course MSCSIA series (D482–D490 + 2-week finish) · MeetCyber 3-term roadmap · Purple Van — 2023 program review · happycamper84 — 5-month TA/military finish · Cole Warren — general WGU acceleration · DegreeForum — MSCSIA Q&A
CompTIA CE FAQ · CompTIA higher-ed CEUs · CompTIA renewal fees · CompTIA Academic Store · ISC2 CPE Handbook (PDF) · ISC2 CISSP · ISC2 “One Million” program conclusion · ISACA Student Hub ($25/yr, 30% off exams) · ISACA CPE policy (PDF) · Maintain CISM · ISACA AAISM · ISACA CISA · GIAC pricing · GIAC CPE info · GIAC grad-coursework rule · EC-Council ECE policy · AWS Certification benefits · AWS AIF2CLOUD promo · Fortinet training
Built by and for the WGU cyber community. Companion guides: BSCSIA Field Guide · BSIT Field Guide.
Reminder: this guide is independent and unofficial. It is not affiliated with, endorsed by, or reviewed by Western Governors University. Community-derived information can be outdated or wrong, and WGU changes catalogs, tuition, transfer rules, and cert rosters regularly — this program’s catalog changed in August 2026 alone. Always confirm with WGU Admissions, your Enrollment Counselor, or your Program Mentor before making a decision that costs money or time. Corrections and new-catalog (E121/E122/E123) intel are genuinely welcome — the first writeups of the new courses will help hundreds behind you.
Found this useful? ☕ Buy me a coffee — it funds the updates when WGU changes the catalog again.