Certified Information Systems Security Professional (CISSP)
CISSP is ISC2's senior-level security certification. It tests whether you can design, run and manage a security program across eight domains, from risk management to software security. It is aimed at experienced practitioners and managers, and full certification requires five years of relevant work experience.
Who it is for
- Security professionals with around five years of experience who want a widely recognised senior credential
- Security managers, architects and consultants who need breadth across all of security, not one tool or vendor
- People moving into security leadership roles such as security manager or CISO track
- Candidates who can pass now but lack experience, via the Associate of ISC2 route
The exam at a glance
| CISSP | |
|---|---|
| Exam | CISSP Certification Exam (outline effective April 15, 2024) |
| Questions | 100-150 (CAT) |
| Time | 180 min |
| Format | Computerized Adaptive Testing (CAT) for all exams; multiple choice and advanced item types. Offered in Chinese, English, German, Japanese and Spanish. |
| Passing | 700 out of 1000 points (scaled score). |
| Price | US$749 (standard registration, Americas and all regions not listed separately; prices and taxes vary by exam location). An 'Exam with Peace of Mind Protection' option gives two attempts within 180 days. |
| Prerequisites | Minimum five years cumulative, full-time experience in two or more of the eight CISSP domains. One year can be waived (for example with a qualifying degree or approved credential). Candidates without the experience can pass the exam and become an Associate of ISC2, then have six years to earn the five years of experience. |
| Validity | Three-year certification cycle. Earn 120 CPE credits per cycle (at least 90 Group A, up to 30 Group A or B; 40 per year suggested) and pay the annual maintenance fee of US$135. CPEs must be completed no later than 90 days after the cycle expiration date. |
Checked against the official ISC2 pages on 2026-11-06: www.isc2.org, www.isc2.org, www.isc2.org, www.isc2.org, www.isc2.org. Exam details change; confirm on the issuer's site before you book. Some details could only be confirmed from secondary sources and are marked for re-checking.
Exam domains
CISSP
| Domain | Weight |
|---|---|
| Security and Risk Management | 16% |
| Asset Security | 10% |
| Security Architecture and Engineering | 13% |
| Communication and Network Security | 13% |
| Identity and Access Management (IAM) | 13% |
| Security Assessment and Testing | 12% |
| Security Operations | 13% |
| Software Development Security | 10% |
How to prepare
- Download the official CISSP exam outline and score yourself honestly against each of the eight domains
- Check that your work history covers at least two domains and meets the experience rule before you pay
- Study the weakest domains first, using the domain weights to decide how much time each one gets
- Practise thinking like a manager or risk adviser: the best answer usually reduces risk in line with business goals, not the most technical fix
- Take timed practice sets of 100-150 questions to build stamina for a three-hour adaptive exam
- Book the exam with a date you can commit to, and plan the endorsement and CPE steps that follow a pass
FAQ
How hard is the CISSP exam?
It is considered one of the harder security exams because it covers eight broad domains and asks judgement questions where several answers look plausible. The adaptive format adjusts difficulty to you, and you need 700 out of 1000 to pass.
How long should I prepare?
It depends on how much of the eight domains your job already covers. Most experienced candidates plan for a few months of steady study; people with gaps in several domains need longer.
How do I keep the CISSP?
The certification runs on a three-year cycle. You must earn 120 CPE credits per cycle (at least 90 in Group A) and pay an annual maintenance fee of US$135.
How much does the CISSP cost?
The standard exam registration is US$749 in the Americas and regions not priced separately; local prices and taxes vary. After certification there is a US$135 annual maintenance fee.