CISSP Exam Overview
The Certified Information Systems Security Professional (CISSP) is a globally recognized certification in the field of information security. It validates an individual’s knowledge and skills in effectively designing, implementing, and managing a best-in-class cybersecurity program.
Exam Details
- Length of exam: 3 hours
- Number of questions: 100-150
- Question format: Multiple choice and advanced innovative questions
- Passing score: 700 out of 1000 points
- Language: English
CISSP Domains
The CISSP exam covers eight domains:
- Security and Risk Management
- Asset Security
- Security Architecture and Engineering
- Communication and Network Security
- Identity and Access Management (IAM)
- Security Assessment and Testing
- Security Operations
- Software Development Security
Exam Weights
| Domain | Weight |
|---|---|
| Security and Risk Management | 15% |
| Asset Security | 10% |
| Security Architecture and Engineering | 13% |
| Communication and Network Security | 13% |
| Identity and Access Management (IAM) | 13% |
| Security Assessment and Testing | 12% |
| Security Operations | 13% |
| Software Development Security | 11% |
Exam Prerequisites
Candidates must have a minimum of five years of cumulative, paid work experience in two or more of the eight domains of the CISSP Common Body of Knowledge (CBK).
A four-year college degree or an approved credential can substitute for one year of the required experience, but candidates must still have at least four years of direct full-time security professional work experience in two or more CISSP domains.
Maintaining Certification
CISSP certification is valid for three years. To maintain the certification, CISSPs must:
- Earn and submit a minimum of 40 Continuing Professional Education (CPE) credits each year
- Pay an Annual Maintenance Fee (AMF) of $125
- Adhere to the (ISC)² Code of Ethics
