ISC2 · CISSP

What Is CISSP?

CISSP is ISC2's senior information security credential. It covers the eight domains of the Common Body of Knowledge and is one of the certifications employers ask for by name for security leadership and architecture roles.

Certification PathKey

Overview

The CISSP exam uses Computerized Adaptive Testing (CAT) worldwide. You see 100 to 150 items in a maximum of three hours, with a passing score of 700 out of 1000. ISC2 has announced that a new exam outline takes effect April 15, 2027. Until then, study the current published outline. Accumentum teaches CISSP prep mapped to the current domains. We do not claim to be an ISC2 authorized training partner. Accumentum offers CISSP exam prep and is an Army CA and Air Force COOL Approved Vendor. ISC2 sets exam content, fees, experience rules, and policies. We do not claim ISC2 authorization.

Accumentum offers CISSP exam prep and is an Army CA and Air Force COOL Approved Vendor. ISC2 sets exam content, fees, experience rules, and policies. We do not claim ISC2 authorization.

Who it is for

  • Security managers, architects, and senior analysts with several years in the field
  • Consultants who need a broadly recognized management-level security credential
  • Associates of ISC2 who passed the exam and are finishing the experience requirement

Exam domains

Weights follow the official CISSP outline.

  1. 01

    Security and Risk Management

    16%

    Governance, compliance, professional ethics, risk management, and security policies that set the frame for every other domain.

  2. 02

    Asset Security

    10%

    Information and asset classification, ownership, privacy, and retention.

  3. 03

    Security Architecture and Engineering

    13%

    Secure design principles, security models, cryptography, and facility and site design.

  4. 04

    Communication and Network Security

    13%

    Secure network architecture, channels, and components across on-premises and cloud environments.

  5. 05

    Identity and Access Management (IAM)

    13%

    Identification, authentication, authorization, federation, and identity lifecycle.

  6. 06

    Security Assessment and Testing

    12%

    Designing and validating assessment, testing, and audit strategies.

  7. 07

    Security Operations

    13%

    Investigations, monitoring, incident management, disaster recovery, and foundational operations controls.

  8. 08

    Software Development Security

    10%

    Securing the software development lifecycle, applying controls to code and application environments.

Exam format and cost

Questions
100 to 150 items (includes pretest items)
Duration
Maximum 3 hours
Format
Computerized Adaptive Testing with multiple choice and advanced item types
Passing score
700 out of 1000
Cost
U.S. $749 standard registration in the Americas (confirm regional pricing on ISC2)
Delivery
ISC2 authorized Pearson VUE test centers
Languages
Chinese, English, German, Japanese, Spanish (Chinese offered in select windows)

Experience and eligibility

You need five years of cumulative, full-time paid experience in two or more of the eight CISSP domains. A qualifying degree or an ISC2-approved credential can waive one year. Only one year can be waived. If you pass the exam without the experience, you become an Associate of ISC2 and have six years to earn it.

Renewal

CISSP runs on a three-year cycle. You need 120 CPE credits (at least 90 Group A) and pay the ISC2 Annual Maintenance Fee (AMF), currently U.S. $135 per year for members. Multiple ISC2 certifications share one AMF.

What is changing

Effective April 15, 2027, the CISSP exam moves to a new outline. If you plan to test near that date, read the upcoming outline on ISC2 and confirm which blueprint your appointment uses.

Roles this credential fits

  • Security architect or senior security engineer
  • Information security manager or director
  • Security consultant or advisor
  • Governance, risk, and compliance leaders who also need broad technical depth

CISSP questions

Is CISSP worth it?

CISSP is worth it when employers or contracts in your market ask for ISC2 proof, or when the domains match work you already do or want next. Common roles include Security architect or senior security engineer, Information security manager or director, and Security consultant or advisor. Read the roles and domains on this page, then decide against your timeline and budget.

How hard is CISSP?

You get 100 to 150 items (includes pretest items) in Maximum 3 hours. Format: Computerized Adaptive Testing with multiple choice and advanced item types. Passing score: 700 out of 1000. Delivery: ISC2 authorized Pearson VUE test centers. You need five years of cumulative, full-time paid experience in two or more of the eight CISSP domains. People who pass usually mix domain study with timed practice, not reading alone.

Does CISSP expire?

CISSP runs on a three-year cycle. You need 120 CPE credits (at least 90 Group A) and pay the ISC2 Annual Maintenance Fee (AMF), currently U.S. $135 per year for members. Multiple ISC2 certifications share one AMF.

How does Accumentum help with CISSP?

We offer Expert-led training mapped to the CISSP domains, PathPay® payment options, PathPass™ practice where the exam is in our catalog, and military funding support where you qualify. We are an Army CA and Air Force COOL Approved Vendor. Our pass rate across Accumentum certification attempts since August 2022 is 98.8% (2,412 certified of about 2,441 attempts).

How much does the CISSP exam cost?

Published pricing for CISSP: U.S. $749 standard registration in the Americas (confirm regional pricing on ISC2). Vendors change voucher prices without notice, so confirm on the official store before you buy. PathPay® can spread Accumentum course tuition when you train with us.

What are the CISSP prerequisites?

You need five years of cumulative, full-time paid experience in two or more of the eight CISSP domains. A qualifying degree or an ISC2-approved credential can waive one year. Only one year can be waived. If you pass the exam without the experience, you become an Associate of ISC2 and have six years to earn it.

What is changing next for CISSP?

Effective April 15, 2027, the CISSP exam moves to a new outline. If you plan to test near that date, read the upcoming outline on ISC2 and confirm which blueprint your appointment uses. If your timeline is flexible, weigh that schedule against when you need CISSP on a resume or contract.

Official sources

Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.