Home Features Reviews Pricing Vendors Contact Blog Sign in
ISC2

Certified Information Systems Security Professional

The Certified Information Systems Security Professional (CISSP) is the most globally recognized certification in the information security market. CISSP validates an information security professional’s deep technical and managerial knowledge and experience to effectively design, engineer, and manage the overall security posture of an organization.

Exam code

CISSP

Duration

180 min

Questions

150

Official Prerequisites

  • Five years cumulative paid work experience in two or more of the eight CISSP CBK domains
  • Four years of experience if holding a relevant college degree or an approved (ISC)² credential
  • Pass the CISSP exam administered by (ISC)²
  • Endorsement by an (ISC)²-certified professional and adherence to the (ISC)² Code of Ethics within nine months
  • If lacking required experience, pass exam to become an Associate of (ISC)² and obtain the required experience within six years
Certified Information Systems Security Professional

Targeted Professions

Information Security Manager Security Consultant Chief Information Security Officer (CISO) Security Architect Senior Security Analyst

Domain blueprint

ExamBoot simulation engine is synchronized with official exam outline. Our adaptive question banks prioritize your reaching your objectives quickly..

Understanding and applying confidentiality, integrity and availability. Includes topics like compliance law, ethics, and security policies.
Identifying and classifying information and assets, setting up privacy protection, and ensuring appropriate retention.
Implementing and managing engineering processes by using secure design principles and recognizing the fundamental concepts of security models.
Designing and protecting network security and managing remote access, networking, and IoT technologies.
Identifying management and access control, managing authentication, and implementing identity as third-party service.

Domain 5

Identity and Access Management

13%
Identifying management and access control, managing authentication, and implementing identity as third-party service.

Domain 6

Security Assessment and Testing

13%
Designing, performing, and analyzing security testing strategies.

Domain 7

Security Operations

13%
Understanding and applying foundational security operations concepts.

Domain 8

Software Development Security

10%
Understanding, applying, and enforcing software security.

Study Tip

Study official (ISC)² CISSP CBK, use practice exams, focus weak domains, create study schedule, review exam objectives, join study group.

Blog

Latest from the ExamBoot Blog

Latest news, hands-on guides, and learner success stories from the ExamBoot blog

How to prepare for the CISSP certification

How to prepare for the CISSP certification

The full exam study guide for CISSP

Docker Certified Associate – Preparation & methodology

Docker Certified Associate – Preparation & methodology

Preparing for the Docker Certified Associate (DCA) exam is an achievable goal with the right plan, focused practice, and high-quality mock exams.

From Zero to Certified: How to Study Smarter, Not Longer

From Zero to Certified: How to Study Smarter, Not Longer

Studying smarter isn’t about shortcuts. It’s about understanding how learning actually works