Career Compass

CISSP Overview

An independent, unofficial guide to the Certified Information Systems Security Professional (CISSP) exam — not affiliated with or endorsed by ISC2.

Format last checked: September 2026. CISSP is delivered year-round by appointment at Pearson VUE testing centers as a single computer-adaptive (CAT) exam of 100–150 multiple-choice/advanced-format items, completed within up to 180 minutes. CISSP also requires a minimum of five years of cumulative, paid work experience in two or more of the eight CBK domains (one year waivable with an approved degree or credential) — candidates who pass without it become an Associate of ISC2 with six years to complete the requirement. Verify current item counts, timing, fees, experience requirements, and endorsement rules against ISC2's own CISSP exam outline before scheduling.
100–150Adaptive items, up to 180 min
3 hrsMaximum testing time
700/1000Pass/fail scaled score
5 yrsRequired work experience

Security & Risk ManagementAsset Security Security Architecture & EngineeringCommunication & Network Security Identity & Access ManagementSecurity Assessment & Testing Security OperationsSoftware Development Security

CBK DomainApprox. Weight
Domain 1 — Security & Risk Management~16%
Domain 2 — Asset Security~10%
Domain 3 — Security Architecture & Engineering~13%
Domain 4 — Communication & Network Security~13%
Domain 5 — Identity & Access Management (IAM)~13%
Domain 6 — Security Assessment & Testing~12%
Domain 7 — Security Operations~13%
Domain 8 — Software Development Security~10%

Independently researched from ISC2's publicly released CISSP Exam Outline (effective April 2024) — verify current domain weighting against ISC2's own materials before relying on it for study planning.

How this platform's testlets differ

The real CISSP is computer-adaptive: item difficulty and exam length adjust in real time based on your answers, using a proprietary ISC2 algorithm this platform cannot reproduce. This portal instead lets you drill one CBK domain at a time: pick a domain below and take a focused, fixed-length timed testlet (15 questions, paced at roughly the real exam's overall minutes-per-question). It won't feel like sitting the real adaptive exam, but it's built for honest, untimed-then-timed review of each domain.

A note on scoring

The real CISSP reports pass/fail only, based on a proprietary 700-out-of-1000-point scaled model computed by the adaptive engine — no raw percent-correct is published, and the exact scoring algorithm is not publicly reproducible. This portal cannot recreate that model, so testlet results here report plain accuracy (percent correct) on a fixed testlet, checked against an illustrative 70%-correct self-check line — not a claim about how the real CAT scoring works.