Who it's for
A CISSP New Year study plan that lasts past January
A New Year CISSP® plan works when it is small enough to keep: a fixed daily goal, a weekly longer block, and a date that fits your weeks. Starting in January, a 90-day plan has you sitting the exam in early April; a 6-month plan, in July. The exam outline changes on 15 April 2027, so decide early which side of that date you want to sit.
Last reviewed 28 October 2026 · Sources · Independent; not affiliated with ISC2
Why New Year plans fade, and how to make this one stick
Most fresh starts fail in the third week, not because people lose interest but because the plan was sized for motivation, not for an ordinary Tuesday. Build for the Tuesday.
- Make the daily goal tiny. Ten to fifteen minutes is enough to keep the habit alive on a bad day. Longer sessions are a bonus, not the rule.
- Anchor it. Tie study to something you already do: "after my morning tea, ten flashcards", or "on the metro home, one short lesson".
- Protect the streak, forgive the miss. A streak is a useful nudge. If you miss a day, the rule is never miss two.
- One long block a week. Use it for new topics, a domain review or a rehearsal. Weekends are not always free, so pick the slot you can really keep.
- Measure, do not guess. A diagnostic in week one and rehearsals later tell you whether the plan is working.
CISSP Buddy is built around this: a daily goal, a streak that follows your own clock and time zone, and a planner that reshuffles your tasks each night when life gets in the way.
Choose your date first: the outline changes on 15 April 2027
ISC2 publishes a new CISSP outline effective 15 April 2027. The format stays the same, but Domain 1 is renamed and every domain weight changes. Which outline you sit depends only on your exam date.
| Plan | Start | Exam window | Outline you sit |
|---|---|---|---|
| 90 days | Early January | Early April | Current outline (from 15 April 2024) |
| 4 months | Early January | Early May | New outline (from 15 April 2027) |
| 6 months | Early January | July | New outline |
If you choose the 90-day plan, book early and keep two weeks of buffer before 15 April 2027: a slip of a fortnight moves you onto the new outline. If you choose six months, study with the new weights from the start. The 2027 changes page has both sets side by side.
The 90-day plan
For people with some security experience and about 8 to 10 hours a week. Total: roughly 100 to 130 hours. Whether that is enough for you is what the rehearsals are for.
| Weeks | Focus | Weekly long block |
|---|---|---|
| 1 | Diagnostic; set your exam date; Security and Risk Management begins | Diagnostic test |
| 2–3 | Security and Risk Management (16%), Asset Security | Mindset drills |
| 4 | Identity and Access Management (IAM) | Domain review |
| 5–6 | Security Architecture and Engineering | Cryptography review |
| 7 | Communication and Network Security | Network diagrams from memory |
| 8 | Security Assessment and Testing | Domain review |
| 9–10 | Security Operations, the largest by subdomains | First full rehearsal |
| 11 | Software Development Security | Weak-domain repair |
| 12 | Weak domains only | Second full rehearsal |
| 13 | Light review, rest, exam | Exam |
Every day, regardless of week: the daily goal, due flashcard reviews and a handful of practice questions with full explanations.
The 6-month plan
For people new to some domains, without a technical background, or with fewer than 6 hours a week. It runs the same sequence at half the pace, adds a second pass through every domain in months four and five, and leaves month six for rehearsals and repair.
- Months 1–3: one domain every one or two weeks, weighted by the outline you will sit.
- Months 4–5: a second pass, spending most time on whatever the rehearsals say is weak.
- Month 6: two or three full rehearsals under exam rules, then a light final week.
Non-technical candidates should plan extra time for the three most technical domains; see CISSP without a technical background.
What a normal week looks like
At about 8 hours a week, a week on the 90-day plan might look like this. Move the blocks to fit your life; keep the shape.
| Day | Session | Time |
|---|---|---|
| Monday to Friday, morning | Daily goal: flashcards and a few practice questions | 15–20 minutes |
| Tuesday and Thursday, evening | A lesson on the week's domain | 40 minutes |
| Wednesday, evening | Mindset drill and reviewing wrong answers | 30 minutes |
| One weekend slot | The long block: new topic, domain review or a rehearsal | 2–3 hours |
The daily goal carries the streak. The long block carries the progress. If a week goes wrong, keep the daily goal and let the planner move the rest.
Not a January person?
Fresh starts come at other times too: Diwali, a new job, a birthday, the start of a new financial year in April. The same plan works from any start date. What changes is where the outline date falls, so check it against your own window before you commit.
A January checklist
- Check your eligibility with the eligibility checker, or plan for the Associate route.
- Pick your date against the outline change, and put it in your calendar.
- Generate a dated plan with the study plan generator and import it to your calendar.
- Set a daily goal you can meet on your worst day.
- Tell one person: a colleague, a study partner or a study group.
- If your employer might pay, send the sponsorship email from CISSP for promotion in January, while budgets are fresh.
Next steps
- Build your dated plan now with the study plan generator.
- Try the CAT simulator demo to see where you stand on day one.
- Request your invite and start the streak.
Questions people ask
Can I prepare for the CISSP in 90 days?
Many working candidates with security experience plan for about three months at 8 to 10 hours a week. Whether it is enough for you depends on your background, so use a diagnostic and rehearsals to check rather than the calendar alone.
Should I take the CISSP before or after the outline change?
Either works; what matters is that you study to the outline in force on your exam date. If you sit before 15 April 2027, use the current outline; on or after it, use the new weights and topics.
How many hours a day should I study for the CISSP?
Consistency matters more than length: a short daily session plus one longer weekly block suits most working people. The study plan generator turns your weekly hours into a dated plan.
What if I miss a few days?
Pick up the next day without trying to make up all the lost time. A good planner redistributes the missed work across the coming weeks instead of piling it onto one day.
Sources
Exam facts are taken from ISC2's published pages and checked on the date above. Always confirm current details with ISC2 before you book.