CISSPCertified Information Systems Security Professional
ISC2's flagship credential for experienced security leaders
Details last reviewed October 2026. Fees and exam formats change — always confirm on the official page.
About this certification
The CISSP is ISC2's senior-level security certification. It validates expertise across 8 security domains (the Common Body of Knowledge) including security risk management, architecture, cryptography, and software security. Requires 5 years of cumulative paid experience in at least 2 of the 8 domains. The English exam is adaptive: 100–150 items in up to 3 hours.
MyCertPath verdict
The most widely respected security certification on the planet — but it's a 'mile-wide, inch-deep' management exam, not a hands-on test. Worth pursuing only after you have the five years of experience required, or you're an Associate of (ISC)² until you do. Salary impact at senior levels is substantial.
What it actually tests
The Computer-Adaptive Test (CAT) format serves between 100 and 150 questions over three hours, getting harder or easier based on your performance. Questions reward thinking like a manager — the 'best' answer is often the one a CISO would pick, not the most technically clever one. Eight domains; Security Architecture and Security Operations carry the heaviest weight.
Common traps
Things candidates underestimate or get wrong on this exam.
- Answering technically when the question wants a management perspective.
- Cramming. CISSP rewards three to six months of steady study; intensive four-week prep usually fails.
- Forgetting the (ISC)² endorsement requirement — you need an endorsing CISSP within nine months of passing.
- Underestimating the maintenance burden: 120 CPE credits every three years to stay certified.
What you'll validate
- ✓Security risk management
- ✓Asset security
- ✓Security architecture and engineering
- ✓Network security
- ✓IAM
- ✓Security assessment and testing
- ✓Security operations
- ✓Software development security
Pros & Cons
Advantages
- +Most recognized security credential globally
- +Major salary impact — top tier earners
- +Required or preferred for CISO and senior security roles
- +Covers the full security domain landscape
Disadvantages
- −Requires 5 years of experience
- −Adaptive (CAT) exam: 100–150 items in up to 3 hours
- −Annual maintenance fee
- −3-year renewal with CPEs
Who it's for
Best for
- →Security professionals targeting leadership roles
- →Those with 5+ years of security experience
- →Anyone targeting CISO or Security Director
Not ideal for
- ×Early-career professionals (start with Security+)
- ×Those without security work experience
Career paths this unlocks
Study Guide
CISSP Study Guide: How to Think Like a CISO and Pass
CISSP trips up strong technical candidates because it's a judgment exam, not a technical one. This guide covers the mindset shift, domain breakdown, study resources, and the specifics of the CAT format that most candidates don't know about.
16 min read
CISSP: quick answers
- How much does the CISSP exam cost?
- The listed exam fee is $749 (USD). Fees vary by region and change over time — confirm on the official page before you buy.
- How long does it take to prepare for CISSP?
- We estimate roughly 250 hours of study for most candidates; your time depends on prior experience.
- How long is the CISSP exam?
- The exam is 180 minutes with about 150 questions.
- How long is the CISSP credential valid?
- 3 years. 120 CPEs over 3 years; $135 annual maintenance fee
Study Resources
Contains affiliate linksTop picks for CISSP
Register for the exam
Official registration only — no third-party resellers. (ISC)² offers candidate discounts for members.
More places to study
Self-paced video courses from independent instructors
Courses and certificates from universities and companies
Practice tests and hands-on labs for IT certifications
Printed and Kindle exam guides
Subscription video courses
Links marked “Affiliate” may earn MyCertPath a commission if you buy, at no extra cost to you. Other links are unpaid. As an Amazon Associate we earn from qualifying purchases. Prices and ratings change often, so we don't list them — check the provider's page. Disclosure
Jobs for CISSP holders
Pay depends on role, location, and experience more than on any single credential. Check current postings below for real ranges in your market.
LinkedIn Jobs
Posted in the last 7 days
Indeed
Dice (tech roles)
Tech-focused job board
CyberSeek (cyber only)
NIST-backed supply/demand tool
Job links open external sites. Search results are live and not curated by MyCertPath.
Quick Facts
- Exam Cost
- $749
- Exam Duration
- 180 minutes
- Questions
- ~150
- Passing Score
- 700/1000 (scaled)
- Exam Format
- Multiple Choice + Performance
- Study Time
- ~250 hours
- Validity
- 3 years
- Salary Impact
- Strong (editorial rating)
- Last Reviewed
- October 2026
Prerequisites
- !5 years paid work experience in 2+ of the 8 CISSP domains
Actyra Training
Custom eLearning built on the science of how people actually learn
Actyra designs and builds cert-prep training programs for enterprise teams — custom courseware grounded in cognitive science.
Talk to a training expert →