PrepWhat is the CISSP?
The CISSP is ISC2's senior-level cybersecurity certification for experienced practitioners and managers. It tests whether you can design, run and manage a security program across eight domains, from security and risk management to software development security. Full certification requires five years of relevant work experience. See our CISSP certification guide.
How hard is the CISSP exam?
The CISSP is widely considered one of the harder security exams because it is broad and asks judgement questions where several answers look right. It covers eight domains, and the adaptive format adjusts difficulty as you answer. You need 700 out of 1000. Thinking like a risk adviser, not a technician, matters as much as knowledge; our CISSP study guide explains how to prepare.
CISSP Study Guide: A 16-Week Plan Mapped to the Eight Domains
What does CISSP stand for?
CISSP stands for Certified Information Systems Security Professional. It is awarded by ISC2 to people who pass the exam, meet the five-year experience requirement and keep up continuing education. It is one of the best-known senior credentials in cybersecurity, aimed at experienced practitioners and managers.
How do I get CISSP certified?
To get CISSP certified you pass the exam and show at least five years of cumulative, full-time work experience in two or more of the eight CISSP domains. One year can be waived, for example with a qualifying degree or approved credential (check ISC2's current list). After passing you complete an endorsed application. Our CISSP requirements guide explains how experience is counted.
CISSP Requirements: Experience, Waivers and the Associate of ISC2 Route
How much is the CISSP exam?
The standard CISSP exam registration costs US$749 in the Americas and in regions ISC2 does not price separately; local prices and taxes vary. Once certified, you also pay an annual maintenance fee of US$135. See our CISSP exam cost page for the full breakdown.
Is the CISSP worth it?
For security professionals with around five years of experience who want a senior, widely recognised credential, the CISSP is usually worth it. It suits managers, architects and consultants who need breadth across all of security rather than one tool or vendor. It is less useful early in a career, when an entry credential such as Security+ fits better.
How long is the CISSP exam?
The CISSP exam lasts up to 180 minutes (three hours). It uses Computerized Adaptive Testing for all exams, so you see between 100 and 150 questions, and the exam can end early once the system is confident of your result.
How long should I study for the CISSP?
Most experienced candidates plan for a few months of steady study. ISC2 does not publish a figure; our editorial estimate is about 16 weeks at 8 to 10 hours a week if your work covers two or three domains, and 20 weeks or more if your experience is narrow. Our CISSP study guide has the 16-week plan.
CISSP Study Guide: A 16-Week Plan Mapped to the Eight Domains
How many questions are on the CISSP exam?
The CISSP exam has between 100 and 150 questions. Because it is adaptive, the number you get depends on how you answer. Questions are multiple choice plus advanced item types, and the exam is offered in Chinese, English, German, Japanese and Spanish. Try our free CISSP practice test.
What is the CISSP passing score?
You need a scaled score of 700 out of 1000 to pass the CISSP. The score is scaled, so it does not translate into a fixed percentage of correct answers, and the adaptive format means candidates see different sets of questions.
Can I take the CISSP without five years of experience?
Yes. You can sit and pass the exam without the experience and become an Associate of ISC2. You then have six years to earn the five years of required experience and become a full CISSP. The CISSP requirements guide covers the Associate route.
CISSP Requirements: Experience, Waivers and the Associate of ISC2 Route
How do I keep my CISSP certification?
You keep the CISSP by earning 120 CPE credits in each three-year cycle and paying the US$135 annual maintenance fee. At least 90 credits must be Group A; ISC2 suggests about 40 a year. CPEs must be completed no later than 90 days after the cycle expiration date.
Should I get CISM or CISSP?
Choose CISSP for broad technical and managerial security coverage, and CISM if your role is mainly managing and governing a security program. CISSP spans eight domains including architecture, networks and software security; ISACA's CISM focuses on governance, risk, the security program and incident management. Our CISM vs CISSP comparison goes deeper.
CISM vs CISSP: Management Focus or Broad Security Expertise?