Certified Information Systems Security Professional credential artwork

Certified Information Systems Security Professional (CISSP)

Validates knowledge of designing and managing security programs, including risk, architecture, access control, operations and software security.

Summary

CISSP is ISC2's broad security credential covering practice, architecture and leadership across eight domains. It suits experienced practitioners, architects and security managers, and it shows breadth across the whole field rather than depth in one specialty.

Good fit if

  • You have 5+ years of paid work in two CISSP domains
  • You are moving into architecture, consulting or leadership
  • Job postings you want list CISSP as required or preferred

Look elsewhere if

  • You are new to security: Security+
  • You want to run a security program: CISM
  • You want hands-on penetration testing: OSCP

Salary & jobs

Prerequisites

Experience required for certification

4–5 years of qualifying security experience

Required

You need five years across at least two CISSP security areas. A qualifying degree or approved certification reduces this to four years. Your experience is verified after passing.

Standard route5 years across at least 2 domains
Qualifying degree or approved certification4 years across at least 2 domains; one waiver only

You can take the exam first and become an Associate of ISC2, with six years to earn the experience. Submit your endorsement within nine months of passing.

Cost

USD · US exam pricing · new ISC2 member
$749
$135
The $135 maintenance fee is due after approval and recurs annually. One fee covers all your ISC2 certifications. Associates pay $50 a year.

What holders say

Certification path

SSCP counts as one year of the experience CISSP requires. After CISSP you can specialize with the ISSAP, ISSEP or ISSMP concentrations.

Certified in Cybersecurity credential artwork
CCCybersecurity fundamentals
Systems Security Certified Practitioner credential artwork
SSCPHands-on security operations
This certification
Certified Information Systems Security Professional credential artwork
CISSPBroad security leadership
Information Systems Security Architecture Professional credential artwork
ISSAPSecurity architecture
Information Systems Security Engineering Professional credential artwork
ISSEPSecurity engineering
Information Systems Security Management Professional credential artwork
ISSMPSecurity management

Renewal

CISSP renews every three years through continuing education and annual fees.

Renewal cycle
3 years
Continuing education
120 CPE credits
Maintenance fee
$135 / year USD

Earn at least 90 Group A credits related to the CISSP domains. The other 30 can be Group A or professional-development Group B credits.

ISC2 member policies ↗

Alternatives

Certified Information Security Manager credential artwork
CISM$810 required · Advanced

For people focused on running a security program rather than broad technical coverage.

Certified Information Systems Auditor credential artwork
CISA$810 required · Advanced

Better fit for IT audit and assurance roles.

OffSec Certified Professional credential artwork
OSCP$1,749 required · Advanced

Hands-on penetration testing credential for offensive roles.

FAQ

What are the CISSP requirements?

Five years of paid work in at least two of the eight domains. A four-year degree or an approved credential waives one year. You can take the exam before you have the experience.

What is an Associate of ISC2?

It is the status you get if you pass the CISSP exam without enough experience. You then have six years to earn it and become a full CISSP.

What is the CISSP passing score and pass rate?

You need 700 out of 1,000 scaled points, which is not the same as 70% correct. ISC2 does not publish an official pass rate.

CISSP vs CISM: which should I take?

CISSP covers security broadly, including technical architecture. CISM focuses on managing a security program. Many senior people hold both.

Is CISSP changing in 2027?

A new outline starts April 15, 2027. It keeps eight domains but changes their weights and adds topics such as AI ethics, passkeys and post-quantum cryptography. Use the outline for your exam date.

How much does CISSP cost?

The US exam costs $749. A new certified member also pays the first $135 annual fee, bringing the initial required cost to $884. Preparation is separate.

Last updated October 2026