thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ISC2 · Cybersecurity · Expert

ISC2 CISSP exam guide

Exam CISSP

The CISSP is ISC2's flagship security certification and the most requested credential for senior security roles. It proves broad knowledge across eight domains, from risk management and architecture to operations and software security, backed by verified professional experience. It satisfies many DoD 8140 management and architecture requirements.

Questions100-150
Time limit180 minutes
Passing score700 out of 1000
Exam fee$749 USD
Valid for3 years
DeliveryPearson VUE test center

Format: Computerized adaptive testing (CAT): multiple choice and advanced innovative items. Fee note: Standard Americas price; varies by test location.

Who it's for

Security professionals with at least five years of paid experience who are moving into security leadership, architecture or senior engineering roles.

What the exam covers

Security and Risk Management16%
Asset Security10%
Security Architecture and Engineering13%
Communication and Network Security13%
Identity and Access Management (IAM)13%
Security Assessment and Testing12%
Security Operations13%
Software Development Security10%

Eligibility & prerequisites

Required: At least 5 years of cumulative, paid work experience in 2 or more of the 8 CISSP domains. A 4-year degree or an approved credential waives 1 year. Candidates without the experience can pass the exam and become an Associate of ISC2, then have 6 years to earn the experience. Endorsement by an ISC2-certified professional is required after passing.

Recommended: Hands-on and managerial security experience across several domains.

Keeping it active

3-year cycle: earn 120 CPE credits (with a minimum each year) and pay the ISC2 annual maintenance fee (AMF).

Skills & careers

Skills it validates

  • Security governance, risk management and compliance
  • Asset classification and data protection
  • Secure architecture and cryptography
  • Network and communication security
  • Identity and access management
  • Security testing and assessment
  • Security operations, incident response and BC/DR
  • Secure software development

Job roles

Chief Information Security OfficerSecurity ManagerSecurity ArchitectSecurity ConsultantIT DirectorSecurity EngineerSecurity Auditor

DoD 8140

Recognized in the DoD 8140 qualification matrix for senior cybersecurity management and architecture work roles (formerly 8570 IAT III, IAM II/III, IASAE I/II). Open the DoD Workforce Navigator

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1-2: Domain 1 (16%) and Domain 2: governance, risk, laws, BCP, data classification and roles.
  2. Week 3-4: Domains 3 and 4: architecture models, cryptography, physical security, network protocols and secure design.
  3. Week 5-6: Domains 5 and 6: IAM models and federation, audits, testing, vulnerability assessment.
  4. Week 7-8: Domains 7 and 8: operations, incident management, DR, change management and secure SDLC.
  5. Week 9-10: Practice tests by domain, then full-length adaptive-style practice; review management-perspective reasoning.
  6. Week 11-12: Final review of weak domains and the ISC2 Code of Ethics; schedule the exam.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Answer as a risk advisor or manager, not a technician; the best answer usually addresses business risk first.
  • CAT ends when the system is confident in your result, so the exam can stop at 100 questions; that does not mean you failed.
  • You cannot go back to earlier questions in CAT; commit to each answer.
  • Human safety is always the top priority in scenario answers.
  • Know the ISC2 Code of Ethics canons in order; ethics questions appear.
  • Pace roughly 70 seconds per question so you do not run out of time before 150.

Key terms for this exam

All 642 terms Study with thinQcards™

Commonly confused on this exam

Frequently asked questions

How much does CISSP cost?

The exam is $749 USD at the standard Americas price. Add the annual maintenance fee after certification.

Can I take CISSP without 5 years of experience?

Yes. If you pass without the experience you become an Associate of ISC2 and have 6 years to earn the required experience.

How many questions are on the CISSP?

The CAT exam has 100 to 150 questions with a 3-hour limit.

How do I maintain CISSP?

Earn 120 CPE credits over each 3-year cycle and pay the annual maintenance fee.

CISSP vs CISM?

CISSP is broader and covers technical and managerial security. CISM focuses only on security management and governance. Many senior leaders hold both.

Official page: www.isc2.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.