The exam
CISSP retake policy: waiting periods and what to do after a fail
If you fail the CISSP® exam you can retake it after 30 days, then 60 days after a second fail and 90 days after a third or later one. ISC2 allows at most 4 attempts in any 12 months. The more useful part is what you do with that time: your score report shows where to focus.
Last reviewed 28 October 2026 · Sources · Independent; not affiliated with ISC2
The rules
| Attempt | Wait before you can book again |
|---|---|
| After failed attempt 1 | 30 days |
| After failed attempt 2 | 60 days |
| After failed attempt 3 | 90 days |
| Limit | 4 attempts in any 12 months |
The waiting period counts from your most recent attempt. ISC2's pricing page lists no retake discount, so budget for the standard fee ($749 in India and the Americas, plus tax) each time; the cost page has every region.
A worked timeline
Say you sit and fail. You can book any date from 30 days later. If that second attempt also fails, the next wait is 60 days from the second sitting, and a third fail means 90 days. Each wait is a floor, not a target: book when your practice says you are ready.
The first few days after a fail
- Rest first. The exam is long and draining. Decide nothing big in the first 48 hours.
- Write down how it felt, not what was asked. Note the topics that felt shaky and where your time went. Do not record or share question content; that breaches the ISC2 NDA you accepted.
- Keep the score report. It is the only feedback ISC2 gives.
- Remember the result is not a measure of your career. Plenty of capable professionals need more than one attempt.
Read your score report bands
A failing result shows each domain as Below, Near or Above Proficiency, and ranks your domains by percentage correct. There is no overall score. The passing score page explains why.
| Band | What it suggests | What to do |
|---|---|---|
| Below Proficiency | A real gap in knowledge or approach | Rebuild from the concepts, then practise heavily. Give this domain the largest share of new hours. |
| Near Proficiency | Close to the line | Targeted practice and careful review of your errors. Look for patterns: misread keywords, wrong role, wrong order. |
| Above Proficiency | At or above the standard | Keep it warm with short weekly reviews. Do not spend your main hours here. |
The bands are coarse, and a domain can rest on a handful of questions. Use them to set priorities, not as a precise diagnosis.
Re-plan before you re-book
- List your domains in order of need using the bands and ranking, then weight them by exam weight. A Below in a heavy domain comes first. The domains overview has the weights.
- Find the cause, not just the topic. Many near-misses come from approach, not knowledge: choosing the technical fix when the question wanted the manager's step. If that sounds familiar, work through think like a manager.
- Change something. Repeating the same book and the same question bank gives you the same exam. Add adaptive practice and explanations for every wrong answer.
- Set a new date that fits your hours. For most working professionals that means several weeks of early mornings and late evenings, not a sprint squeezed into the minimum wait. Rebuild the timeline with the study plan tool.
- Check the calendar. A new outline starts on 15 April 2027. If your retake falls after it, adjust using what changes in 2027.
Why near misses happen
A fail close to the line is rarely about one missing chapter. The usual causes are habits:
- Answering a different question. Picking a true statement instead of the one that answers FIRST or BEST.
- The technician's reflex. Choosing the hands-on fix when the scenario puts you in a leadership role.
- Uneven coverage. One or two domains left thin because they felt boring or unfamiliar.
- Pacing. Long stalls early, then a rush. The run-out-of-time rule makes a slow start expensive.
- Practising with review. Banks that let you go back build habits the real exam does not allow.
Each of these can be trained, and most of them improve faster than raw knowledge does.
Retake soon, or wait longer?
If your bands were mostly Near and Above, a focused few weeks and an early retake while the material is fresh often make sense. If several heavy domains were Below, take longer and rebuild properly; the minimum wait is not a deadline. Either way, book when your practice results sit above the line consistently.
Next steps
Take a short adaptive run in the CAT simulator to see where you stand today, then rebuild your plan with the study plan guide.
Questions people ask
How soon can I retake the CISSP after failing?
30 days after a first attempt, 60 days after a second and 90 days after a third or later attempt.
How many times can I take the CISSP in a year?
At most 4 attempts in any 12-month period.
Do I get a score if I fail the CISSP?
No numerical score. You receive a Below, Near or Above Proficiency level for each domain, plus a ranking of your domains by percentage correct.
Do I have to pay again to retake the CISSP?
Yes, each attempt is booked as a new exam. ISC2's pricing page lists no retake discount, so plan for the standard fee.
Sources
Exam facts are taken from ISC2's published pages and checked on the date above. Always confirm current details with ISC2 before you book.