CISSP

Full depth

ISC2 · Blueprint 2024-04-15 · verified 21 September 2026

The exam rewards the managerial answer. Where two options are both technically sound, the one that gathers information, respects ownership and follows the process is the key.

Start free

Membership is free and takes a minute. It is what saves your position, your bands and your plan.

Join free to start Already a member? Sign in

Blueprint

1 Security and Risk Management 15%

2 Asset Security 10%

3 Security Architecture and Engineering 13%

4 Communication and Network Security 13%

5 Identity and Access Management 13%

6 Security Assessment and Testing 12%

7 Security Operations 13%

8 Software Development Security 11%

Weightings taken from the owner's published exam outline. Owner's site.

What this pathway contains

320Flashcards

Blueprint-weighted, one idea per card, with the objective each one serves.

595Practice items

A direction-finder, and a check per domain with rationales withheld until you submit.

125Readiness form

Matches the real exam's length. A band is released only under four conditions.

After the exam

The certificate is the start of the job, not the end of it. This exam tests what you know about the subject. The Association's courses cover what the role asks for once the certificate is on the wall, and each one ends in an artefact you keep.

Browse the course catalog

CISSP, CCSP, CGRC and SSCP are marks of ISC2. The Association is not affiliated with, endorsed by or accredited by ISC2. Pathway activity does not earn ALCs and does not lead to an Association credential.