CISSP is ISC2's globally recognized certification for experienced security professionals who design, implement, and manage an enterprise cybersecurity program. ISC2 calls it the world's premier cybersecurity certification.
The eight domains, the 5-year experience requirement, and the accreditations (ANAB / ISO/IEC 17024; U.S. DoD 8140) are verified 2026-08-06 against ISC2. Confirm the current exam format, fee, and CPE/maintenance requirements at isc2.org before you register.
CISSP certifies that you can design, build, and run an enterprise security program across all of its major disciplines, from governance and risk to architecture, operations, and software security. It is aimed at experienced practitioners, not beginners, which is why it carries a five-year experience requirement.
The credential is one of the most requested in cybersecurity, is accredited to ISO/IEC 17024, and is recognized under the U.S. Department of Defense 8140 framework. It pairs well with management and audit credentials such as CISM and CISA.
Governance, compliance, legal and regulatory issues, and the risk principles that underpin a security program.
Classifying, handling, retaining, and protecting information and assets across their lifecycle.
Secure design principles, security models, cryptography, and engineering secure systems.
Securing network architecture, components, and communication channels.
Managing identities and controlling how access is granted, reviewed, and revoked.
Designing and performing security assessments, tests, and audits.
Running day-to-day security: monitoring, incident response, investigations, and recovery.
Building security into the software development lifecycle.
Free practice, right now
60 original multiple-choice questions and 37 flashcards, split across the real CISSP domains, so a low score points you at the exact area to study. Runs in your browser. No account, no payment.
Play the CISSP game freeAll 11 practice banks
This certification guide stays free permanently. The individual practice games are being replaced by one game covering every exam.CISSP, Certified Information Systems Security Professional, is an ISC2 certification for experienced professionals who design, implement, and manage an enterprise cybersecurity program across eight domains.
Security and Risk Management; Asset Security; Security Architecture and Engineering; Communication and Network Security; Identity and Access Management; Security Assessment and Testing; Security Operations; and Software Development Security.
ISC2 requires five years of cumulative paid work experience across the CISSP domains. Confirm current requirements, including any experience waivers, on the ISC2 CISSP page.
Yes. CISSP is accredited to ISO/IEC 17024 and is approved under the U.S. Department of Defense 8140 framework, as stated by ISC2.
Study the official ISC2 CISSP exam outline and CBK, and use reputable published study materials. Avoid braindump sites; they violate exam rules and are often inaccurate.