CtrlK

Search...

Trending this month -AWS CCP•CISSP•AZ-900•A+•TOGAF•AI-102•Sec+•AZ-104•CSA•ITIL 4

Quick Feedback

Back to CISSP

CISSP Exam Guide

A comprehensive 12-week study plan to help you prepare for the ISC2 Certified Information Systems Security Professional (CISSP) certification exam.

Exam Information

180 minutes (CAT format)

Duration

100-150 questions

Questions

700/1000

Passing Score

$749 USD

Exam Cost

Recommended Study Plan

Week 1

Security and Risk Management

Domain 1: Security and Risk Management (15%)

15-18 hours

Security governance principles
Compliance and regulatory requirements
Security policies and procedures
Risk management concepts

Recommended Resources:

Official Study Guide

NIST Framework

Week 2

Risk Management & BCP

Domain 1: Security and Risk Management (15%)

12-15 hours

Business continuity planning
Threat modeling
Security awareness training
Professional ethics

Recommended Resources:

ISC2 Materials

BCP Templates

Week 3

Asset Security

Domain 2: Asset Security (10%)

10-12 hours

Information classification
Data ownership and handling
Privacy protection
Asset retention and destruction

Recommended Resources:

Data Protection Laws

Documentation

Week 4

Security Architecture Part 1

Domain 3: Security Architecture and Engineering (13%)

14-16 hours

Security models (Bell-LaPadula, Biba)
System architecture concepts
Security evaluation criteria
Trusted computing base

Recommended Resources:

Architecture Guides

Models Reference

Week 5

Security Architecture Part 2

Domain 3: Security Architecture and Engineering (13%)

14-16 hours

Cryptography fundamentals
Cryptographic systems
Physical security
Site and facility design

Recommended Resources:

Cryptography Materials

Physical Security

Week 6

Communication and Network Security

Domain 4: Communication and Network Security (13%)

14-16 hours

Network architecture and design
Secure network components
Network protocols
Wireless security

Recommended Resources:

Network Security

Protocol Analysis

Week 7

Identity and Access Management

Domain 5: Identity and Access Management (13%)

12-14 hours

Identity management lifecycle
Access control models
Authentication mechanisms
Single sign-on and federation

Recommended Resources:

IAM Guides

Authentication Labs

Week 8

Security Assessment and Testing

Domain 6: Security Assessment and Testing (12%)

12-14 hours

Security assessment strategies
Vulnerability assessment
Penetration testing
Log analysis and monitoring

Recommended Resources:

Testing Methodologies

Audit Guides

Week 9

Security Operations

Domain 7: Security Operations (13%)

14-16 hours

Investigation and incident management
Disaster recovery
Resource protection
Change management

Recommended Resources:

Incident Response

DR Planning

Week 10

Software Development Security

Domain 8: Software Development Security (11%)

12-14 hours

SDLC security
Security controls in development
Software security effectiveness
Secure coding practices

Recommended Resources:

OWASP

Secure Coding

Week 11

Integration & Review

All Domains

15-18 hours

Cross-domain scenarios
Weak area review
Practice questions by domain
Concept integration

Recommended Resources:

Practice Questions

Study Notes

Week 12

Final Preparation

All Domains

20-25 hours

Full practice exams
CAT format practice
Time management
Exam day preparation

Recommended Resources:

Practice Exams

CAT Simulator

Exam Tips & Strategies

Think Like a Manager

CISSP tests managerial thinking, not just technical knowledge. Consider business impact and risk in answers.

CAT Format

The adaptive test adjusts difficulty based on your answers. Stay calm if questions seem hard - it means you're doing well.

Experience Matters

CISSP requires 5 years of experience in 2+ domains. Draw on your real-world experience during the exam.

Read Thoroughly

CISSP questions are often long with multiple correct-looking answers. Read every word carefully.

Key Topics to Master

CIA Triad and security principles

Risk assessment and management

Business continuity and disaster recovery

Security governance and compliance

Cryptographic systems and PKI

Security models and frameworks

Network security protocols

Access control models (DAC, MAC, RBAC)

Identity management and SSO

Vulnerability assessment and penetration testing

Incident response procedures

Secure software development lifecycle

Physical security controls

Legal and regulatory requirements

Professional ethics (ISC2 Code of Ethics)

For the most up-to-date exam information, visit the official exam guide.

View Official Exam Guide

Back to CISSP

CISSP Exam Guide

A comprehensive 12-week study plan to help you prepare for the ISC2 Certified Information Systems Security Professional (CISSP) certification exam.

Exam Information

180 minutes (CAT format)

Duration

100-150 questions

Questions

700/1000

Passing Score

$749 USD

Exam Cost

Recommended Study Plan

Week 1

Security and Risk Management

Domain 1: Security and Risk Management (15%)

15-18 hours

Security governance principles
Compliance and regulatory requirements
Security policies and procedures
Risk management concepts

Recommended Resources:

Official Study Guide

NIST Framework

Week 2

Risk Management & BCP

Domain 1: Security and Risk Management (15%)

12-15 hours

Business continuity planning
Threat modeling
Security awareness training
Professional ethics

Recommended Resources:

ISC2 Materials

BCP Templates

Week 3

Asset Security

Domain 2: Asset Security (10%)

10-12 hours

Information classification
Data ownership and handling
Privacy protection
Asset retention and destruction

Recommended Resources:

Data Protection Laws

Documentation

Week 4

Security Architecture Part 1

Domain 3: Security Architecture and Engineering (13%)

14-16 hours

Security models (Bell-LaPadula, Biba)
System architecture concepts
Security evaluation criteria
Trusted computing base

Recommended Resources:

Architecture Guides

Models Reference

Week 5

Security Architecture Part 2

Domain 3: Security Architecture and Engineering (13%)

14-16 hours

Cryptography fundamentals
Cryptographic systems
Physical security
Site and facility design

Recommended Resources:

Cryptography Materials

Physical Security

Week 6

Communication and Network Security

Domain 4: Communication and Network Security (13%)

14-16 hours

Network architecture and design
Secure network components
Network protocols
Wireless security

Recommended Resources:

Network Security

Protocol Analysis

Week 7

Identity and Access Management

Domain 5: Identity and Access Management (13%)

12-14 hours

Identity management lifecycle
Access control models
Authentication mechanisms
Single sign-on and federation

Recommended Resources:

IAM Guides

Authentication Labs

Week 8

Security Assessment and Testing

Domain 6: Security Assessment and Testing (12%)

12-14 hours

Security assessment strategies
Vulnerability assessment
Penetration testing
Log analysis and monitoring

Recommended Resources:

Testing Methodologies

Audit Guides

Week 9

Security Operations

Domain 7: Security Operations (13%)

14-16 hours

Investigation and incident management
Disaster recovery
Resource protection
Change management

Recommended Resources:

Incident Response

DR Planning

Week 10

Software Development Security

Domain 8: Software Development Security (11%)

12-14 hours

SDLC security
Security controls in development
Software security effectiveness
Secure coding practices

Recommended Resources:

OWASP

Secure Coding

Week 11

Integration & Review

All Domains

15-18 hours

Cross-domain scenarios
Weak area review
Practice questions by domain
Concept integration

Recommended Resources:

Practice Questions

Study Notes

Week 12

Final Preparation

All Domains

20-25 hours

Full practice exams
CAT format practice
Time management
Exam day preparation

Recommended Resources:

Practice Exams

CAT Simulator

Exam Tips & Strategies

Think Like a Manager

CISSP tests managerial thinking, not just technical knowledge. Consider business impact and risk in answers.

CAT Format

The adaptive test adjusts difficulty based on your answers. Stay calm if questions seem hard - it means you're doing well.

Experience Matters

CISSP requires 5 years of experience in 2+ domains. Draw on your real-world experience during the exam.

Read Thoroughly

CISSP questions are often long with multiple correct-looking answers. Read every word carefully.

Key Topics to Master

CIA Triad and security principles

Risk assessment and management

Business continuity and disaster recovery

Security governance and compliance

Cryptographic systems and PKI

Security models and frameworks

Network security protocols

Access control models (DAC, MAC, RBAC)

Identity management and SSO

Vulnerability assessment and penetration testing

Incident response procedures

Secure software development lifecycle

Physical security controls

Legal and regulatory requirements

Professional ethics (ISC2 Code of Ethics)

For the most up-to-date exam information, visit the official exam guide.

View Official Exam Guide