CISSP study guides

How to prepare, in five steps

Most people who struggle with the CISSP did not lack effort. They spent it in the wrong places: reading every chapter at the same depth, memorising ports and algorithms, and taking practice tests only to watch the score. The exam rewards something else. It tests whether you can read a short business scenario and choose what a security leader would do, across 8 domains and 62 subdomains.

A plan that respects that looks like this:

1. Diagnose. Take a short mixed test across all 8 domains before you study anything. It tells you which domains are already familiar and which are new.
2. Plan by weight. The domains are not equal. Security and Risk Management carries 16% of the exam; Asset Security and Software Development Security carry 10% each. Spend your hours in roughly the same proportions, then shift them towards your weak areas. The study plan guide has templates for 30, 60 and 90 days and six months.
3. Learn the concepts, then drill. Read one topic, then answer questions on it the same day. Read the explanation for every option, including the ones you got right.
4. Train the judgement. Many questions offer two technically correct answers. The one the exam wants is the one a manager would choose. Our think like a manager guide explains the habits and lets you practise them.
5. Rehearse and measure. Sit full rehearsals under the exam's own rules, with no going back and a clock that keeps running. Book the exam when your results are steady across several runs, not after one good day.

Which guide to read first

If you have not started yet

Start with how to pass the CISSP. It walks through the whole loop, from the first diagnostic to exam day, and ends with a checklist.

If you are worried about difficulty

Read is the CISSP hard? for an honest look at what makes it demanding, what ISC2 does and does not publish, and how candidates without a deep technical background can make it manageable.

If you are short of time

The study plan guide shows how to fit preparation around a full-time job, with weekly hour scenarios and dates for full rehearsals. The flashcards guide explains how ten minutes of spaced repetition a day keeps what you learned from fading.

If you want to test yourself now

Try our free CISSP practice questions: our own questions across all 8 domains, with every option explained. Or try the CAT simulator demo to feel how an adaptive test behaves.

Before you plan: know the exam

A plan is only as good as its picture of the exam. The current format, effective from 15 April 2024, is a computerized adaptive test of 100–150 items in 3 hours, with a passing standard of 700 out of 1,000. A new outline takes effect on 15 April 2027, with the same format and new domain weights. The exam overview covers each fact with its ISC2 source, and what changes in 2027 shows the new weights side by side.

Next steps

• Build a week-by-week plan with the free study plan generator.
• Check you meet the experience requirement with the eligibility checker.
• When you want the full loop in one place, request an invite to the founding cohort.