Skip to content
FreeISC2 Certified in Cybersecurity (CC) preparation is free on iSecPath — permanently, not a trial.See pricing
iSecPathiSecPath

ISC2

ISC2 Certified Information Systems Security Professional (CISSP)

Breadth across all eight ISC2 domains for practitioners moving into lead, architect and manager roles.

Coming soon
Required exam: CISSP · ~120 hours · 8 domains

Certification and exam

Certification provider
ISC2
Official certification name
ISC2 Certified Information Systems Security Professional (CISSP)
Required exam
CISSP — Certified Information Systems Security Professional exam
Current exam version · effective 2024-04-15 · no retirement date announced

Grouped in our Expert plan based on where it fits in your learning path. This is independent of ISC2's own certification naming and tier structure.

iSecPath preparation scope

  • Structured coverage of all eight CISSP domains
  • Risk trade-off and architecture review exercises
  • Managerial judgement scenario practice
  • Readiness tracking at domain level

What is and is not included

  • Included: iSecPath learning access for the term of your plan.
  • Not included: the external ISC2 certification exam.
  • Not included: exam registration and scheduling.
  • Not included: the exam fee.
  • Not included: meeting ISC2's eligibility requirements.

iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.

Prerequisites and eligibility

Set by ISC2, not by iSecPath. Confirm against the official source before you register.

Prerequisites

  • ISC2 requires five years of cumulative paid work experience in two or more CISSP domains, or Associate of ISC2 status while you earn it.

Eligibility requirements

  • Five years cumulative paid work experience in two or more of the eight domains, with ISC2's published one-year education or credential waiver.
  • Endorsement by an ISC2-certified professional and ISC2 membership.

Experience requirements

Authoritative ISC2 experience requirement — verify current wording with ISC2.

Exam domains

Approximate weighting used to structure our learning path. Verify against ISC2's published blueprint.

  • Security & Risk Management16%
  • Asset Security10%
  • Security Architecture & Engineering13%
  • Communication & Network Security13%
  • Identity & Access Management13%
  • Security Assessment & Testing12%
  • Security Operations13%
  • Software Development Security10%

Sample scenario

One budget, three risks

You can fund exactly one of: EDR expansion, an identity overhaul, or a third-party assurance programme. Defend your choice with a risk position an audit committee will accept.

Focus: Security & Risk Management

Career path mapping

iSecPath Recommended Path. Mapping types describe our learning-path logic — "Prerequisite" is used only where the provider authoritatively requires it.

Security Architecture

Employer-relevant

Commonly listed on senior architecture postings.

Security Leadership

Recommended

Breadth across all eight domains, expected in many lead roles.

Source of truth

Operational owner
iSecPath Curriculum Operations
Last verified
2026-08-24
Next review
2026-11-24
Verification notes
Re-verify exam outline effective date, domain weights and waiver rules each quarter.

Provider information is rechecked at least quarterly and whenever ISC2 announces a material change. Exam versions here are a snapshot, never a permanent source of truth.