The CISSP exam costs $749, runs 3 hours with 100 to 150 adaptive questions, and requires 700 out of 1,000 points to pass. ISC2's senior certification requires five years of paid security experience in at least two of its eight domains, and a relevant degree can count for one of those years.
CISSP at a glance
| Detail | What the issuer says |
|---|---|
| Issuer | ISC2 |
| Exam | CISSP Exam Outline effective April 15, 2024 |
| Questions | 100 to 150 (adaptive testing) |
| Question types | Multiple choice and advanced item types |
| Time limit | 3 hours |
| Passing score | 700 out of 1000 points |
| Exam fee | $749 |
| Experience | 5 years of paid, full-time experience in at least 2 of the 8 CISSP domains; part-time work and internships may count |
| Renewal | 120 CPE credits per 3-year cycle (90 Group A + 30 Group A or B; 40 suggested annually); 3-year certification cycle |
| Ongoing fee | US$135 Annual Maintenance Fee (single AMF regardless of number of ISC2 certifications) |
| DoD 8140 | U.S. DoDM 8140.03 approved by Department of Defense (per ISC2) |
| Delivery | ISC2 Authorized PPC and PVTC Select Pearson Testing Centers |
Who the CISSP is for
The CISSP is a senior credential for security practitioners moving into architecture, management and leadership. ISC2 describes it as ideal for experienced security practitioners, managers and executives, and it covers all eight domains of security rather than one specialty.
A bachelor's or master's degree in computer science, IT or a related field can count for one of the five required years. If you pass before you have the experience, you become an Associate of ISC2 and have six years to earn it.
CISSP exam domains
The exam outline sets how much of the test covers each area. Spend study time in proportion to the weights.
| Domain | Exam weight |
|---|---|
| Security and Risk Management | 16% |
| Asset Security | 10% |
| Security Architecture and Engineering | 13% |
| Communication and Network Security | 13% |
| Identity and Access Management (IAM) | 13% |
| Security Assessment and Testing | 12% |
| Security Operations | 13% |
| Software Development Security | 10% |
How much the CISSP costs
The $749 standard registration applies in the Americas and most other regions. Rescheduling costs $50 and cancelling costs $100.
| Cost | Amount |
|---|---|
| Exam fee | $749 |
| Annual maintenance fee, 3 years | $405 |
| Total | $1,154 |
Totals add the issuer's published fees for one exam attempt and a full three-year cycle. Training, books and retakes are extra.
Keeping the CISSP active
120 CPE credits per 3-year cycle (90 Group A + 30 Group A or B; 40 suggested annually) (3-year certification cycle). US$135 Annual Maintenance Fee (single AMF regardless of number of ISC2 certifications).
Careers and pay
Information security analysts earned a median $129,180 in May 2025, and BLS projects the field to grow 21% from 2025 to 2035. Computer and information systems managers earned a median $175,140 in May 2025, and BLS projects the field to grow 15.8% from 2025 to 2035. BLS does not report pay by certification, so treat any single "CISSP salary" figure with caution.
See our cybersecurity salary guide and cybersecurity analyst career guide.
CISSP compared with related certifications
| Certification | Issuer | Exam fee | Experience to certify |
|---|---|---|---|
| CISSP | ISC2 | $749 | 5 years of paid, full-time experience in at least 2 of the 8 CISSP domains |
| CCSP | ISC2 | $599 | 5 years in IT, including 3 in cybersecurity and 1 in a CCSP domain |
| CISM | ISACA | $760 | 5 years of information security management experience across at least 3 of the 4 CISM domains |
| Security+ | CompTIA | $439 | None required |
| CC | ISC2 | $199 | None required |
Frequently asked questions
How much does the CISSP exam cost?
$749 for the exam, per ISC2. Over a full three-year cycle, published fees total about $1,154 before training.
How hard is the CISSP exam?
The CISSP uses adaptive testing: you answer 100 to 150 questions in up to 3 hours and need 700 out of 1,000 points to pass. Study each of the eight domains in proportion to its exam weight.
Do I need experience for the CISSP?
5 years of paid, full-time experience in at least 2 of the 8 CISSP domains; part-time work and internships may count
Does a degree help with the CISSP?
A bachelor's or master's degree in computer science, IT or a related field can count for one of the five required years. If you pass before you have the experience, you become an Associate of ISC2 and have six years to earn it.
How do I renew the CISSP?
120 CPE credits per 3-year cycle (90 Group A + 30 Group A or B; 40 suggested annually) (3-year certification cycle). US$135 Annual Maintenance Fee (single AMF regardless of number of ISC2 certifications).
Sources
Exam, price and renewal details come from each issuer's official pages, checked October 2026. Issuers change prices and exam versions, so confirm before you register.