The world's premier cybersecurity certification, validating your expertise in designing, engineering, and managing an organization's overall security posture.
Join over 150,000 certified professionals worldwide who have earned this gold standard credential.
Computerized Adaptive Testing (CAT) for English exams
3 hours for CAT format (100-150 questions)
6 hours for linear format in other languages (250 questions)
Scaled scoring: 0-1000 points
Passing score: 700 points
Preliminary results provided immediately
Exam fee: $749 USD
Available in: English, Chinese, German, Japanese, Spanish
Testing at Pearson VUE centers worldwide
The CISSP Common Body of Knowledge (CBK) encompasses eight domains representing the most comprehensive body of knowledge in information security. Each domain has a specific weight in the exam.
This foundational domain covers security concepts, governance, compliance, risk management, and professional ethics. It emphasizes aligning security with business goals and understanding legal/regulatory requirements.
Focuses on protecting information assets throughout their lifecycle, including classification, ownership, handling requirements, and data security controls.
Covers engineering processes using secure design principles, security models, cryptography, and physical security considerations for sites and facilities.
Focuses on securing network architectures, components, and communications to protect data in transit and ensure secure connectivity.
Covers the identification, authentication, authorization, and accountability of users and processes accessing organizational assets.
Focuses on designing, performing, and analyzing security testing to evaluate the effectiveness of security controls.
Addresses day-to-day security operations including incident management, disaster recovery, and business continuity.
Covers integrating security into the software development lifecycle (SDLC) and applying secure coding guidelines and standards.
A curated bank of thousands of questions mapped to exam blueprints (CISA & CISSP). Questions include explanations, references, and difficulty tags. Practice by domain, by timed exam, or randomized for long-term retention.
Timed mocks that mimic official exams and hands-on labs that simulate audits, SOC tasks and incident response scenarios — not just multiple-choice memorization.
After completing a validated skills assessment, CSQNA issues a verified certificate that proves practical capabilities. You can take the skills check (unlimited attempts for 30 days) and receive a downloadable certificate once you meet the passing criteria.
CISSP certification significantly boosts earning potential:
CISSP opens doors to leadership positions including:
The CISSP credential provides:
To maintain your CISSP certification, you must meet ongoing requirements:
120 credits every 3 years
Continuing professional education
$125 USD annual maintenance fee
Keeps certification active
Abide by the ISC² Code of Ethics
Professional conduct standards
Verified by an ISC² certified professional
Validates work experience
Yes. If you pass the CISSP exam without the required experience, you become an "Associate of ISC²." You then have up to 6 years to gain the necessary 5 years of cumulative work experience in two or more of the eight CISSP domains. Once you meet the experience requirement and complete the endorsement process, you become a full CISSP.
The CISSP is widely regarded as one of the most challenging cybersecurity certifications due to its breadth and depth. It covers eight domains of security knowledge, requiring both theoretical understanding and practical application. The Computerized Adaptive Testing (CAT) format adapts to your ability level, making it a rigorous assessment. Most candidates spend 3-6 months preparing, and passing rates are typically around 20-30%.
The main costs include:
Recommended preparation strategy includes:
CISSP is unique in several ways:
The timeline varies: