Home Features Reviews Pricing Vendors Contact Blog Sign in
ISC2

Certified Information Systems Security Professional

The Certified Information Systems Security Professional (CISSP) is the most globally recognized certification in the information security market. CISSP validates an information security professional’s deep technical and managerial knowledge and experience to effectively design, engineer, and manage the overall security posture of an organization

Exam code

CISSP

Duration

240 min

Questions

155

Official Prerequisites

  • At least five years of cumulative paid full-time work experience in two or more of the eight CISSP domains
  • A four-year college degree or regional equivalent or approved credential waives one year of required experience
  • Endorsement by an (ISC)² certified professional within nine months of passing the exam
  • Agreement to adhere to the (ISC)² Code of Ethics
  • Valid government-issued photo identification required for exam day validation
Certified Information Systems Security Professional

Targeted Professions

Information Security Manager Security Analyst Security Consultant Security Architect Chief Information Security Officer

Domain blueprint

ExamBoot simulation engine is synchronized with official exam outline. Our adaptive question banks prioritize your reaching your objectives quickly..

Understanding and applying confidentiality, integrity and availability. Includes topics like compliance law, ethics, and security policies.
Identifying and classifying information and assets, setting up privacy protection, and ensuring appropriate retention.
Implementing and managing engineering processes by using secure design principles and recognizing the fundamental concepts of security models.
Designing and protecting network security and managing remote access, networking, and IoT technologies.
Identifying management and access control, managing authentication, and implementing identity as third-party service.

Domain 5

Identity and Access Management

13%
Identifying management and access control, managing authentication, and implementing identity as third-party service.

Domain 6

Security Assessment and Testing

13%
Designing, performing, and analyzing security testing strategies.

Domain 7

Security Operations

13%
Understanding and applying foundational security operations concepts.

Domain 8

Software Development Security

10%
Understanding, applying, and enforcing software security.

Study Tip

Consistently review the official (ISC)² CBK, use timed practice exams, target weak domains, join study groups, and review real-world case studies.

Blog

Latest from the ExamBoot Blog

Latest news, hands-on guides, and learner success stories from the ExamBoot blog

CISSP: Certified Information Systems Security Professional – Certification presentation

CISSP: Certified Information Systems Security Professional – Certification presentation

The Certified Information Systems Security Professional (CISSP) credential, governed by (ISC)², is globally recognized as the gold standard in information security. It validates your ability to design, implement and manage a best-in-class cybersecurity program. CISSP holders demonstrate mastery across eight core domains, ensuring they can protect organizations against ever-evolving threats.