🏆 World's Premier Cybersecurity Cert · 2025

ISC2 Certified Information Systems
Security Professional (CISSP)

Prove you have what it takes to effectively design, implement and manage a best-in-class cybersecurity programme. The CISSP is the gold standard for experienced security practitioners and executives worldwide.

Risk Management Security Architecture IAM 8 Domains 5 Years Experience CISO Level

Enroll Now

Risk ManagementGovernance, ethics & risk frameworks

Security ArchitectureSecure design & cryptography

Identity & Access ManagementAuthentication & authorisation

Security OperationsIncident management & DR/BC

125–175

Exam Questions

4 Hrs

Duration (CAT)

5 Years

Experience Req.

Domains

Why It's Trending

The World's Most Recognised Cybersecurity Credential

The CISSP is consistently ranked as the most sought-after cybersecurity certification by employers globally, opening doors to senior roles and leadership positions.

+55%

Salary Premium

CISSP-certified professionals earn significantly more than non-certified peers in comparable roles worldwide.

Trending

Top 3

Most In-Demand

CISSP consistently ranks among the top three most in-demand certifications globally for cybersecurity roles.

Key Domains

Comprehensive coverage from risk management and security architecture to operations and software development.

Trending

Executives

Career Path

The CISSP is the definitive credential for CISOs, Security Directors and senior cybersecurity executives.

Certification

ISC2 Certified Information Systems Security Professional (CISSP)

CISSP — Certified Information Systems Security Professional

The CISSP validates your expertise across a wide array of security practices and principles, proving your ability to effectively design, implement and manage a best-in-class cybersecurity programme. Holding the CISSP makes you an ISC2 member, unlocking exclusive resources, educational tools and peer networking opportunities.

Prerequisites: Five years of cumulative paid work experience in two or more of the eight CISSP domains. A four-year degree or approved credential can substitute for one year of experience. Associate of ISC2: If you lack the experience, you can pass the exam and become an Associate, working toward full certification.

Course Content

Complete CISSP Curriculum

Click any domain to expand and explore the topics covered in detail.

Security and Risk Management

7 Topics

Understand, adhere to and promote professional ethics (ISC2 Code of Ethics)

Understand and apply security concepts: confidentiality, integrity, availability

Evaluate and apply security governance principles and control frameworks

Understand legal, regulatory, and compliance issues including GDPR and privacy laws

Develop and implement security policies, standards, procedures and guidelines

Apply risk management concepts: threat identification, risk analysis and treatment

Understand threat modelling and supply chain risk management (SCRM)

Asset Security

5 Topics

Identify and classify information and assets including data classification

Establish information and asset handling requirements

Provision information and assets securely with proper ownership and inventory

Manage data lifecycle: collection, location, maintenance, retention and destruction

Determine data security controls including DRM, DLP and Cloud Access Security Broker

Security Architecture and Engineering

6 Topics

Research and implement engineering processes using secure design principles

Understand fundamental concepts of security models (Biba, Bell-LaPadula)

Assess and mitigate vulnerabilities in security architectures and solution elements

Select and determine cryptographic solutions: symmetric, asymmetric, PKI

Understand methods of cryptanalytic attacks and countermeasures

Apply security principles to site and facility design and manage system lifecycle

Communication and Network Security

5 Topics

Apply secure design principles in network architectures (OSI, TCP/IP models)

Understand secure protocols: IPSec, SSH, TLS and converged protocols

Implement logical segmentation: VLANs, VPNs and micro-segmentation

Secure network components including NAC, endpoint security and transmission media

Implement secure communication channels: voice, remote access and data communications

Identity and Access Management (IAM)

5 Topics

Control physical and logical access to information, systems and facilities

Design identification and authentication strategies for users, devices and services

Implement federated identity management and single sign-on (SSO)

Implement and manage authorisation mechanisms: RBAC, MAC, DAC, ABAC

Manage the identity and access provisioning lifecycle including privileged accounts

Security Assessment and Testing

5 Topics

Design and validate assessment, test and audit strategies

Conduct security control testing: vulnerability assessment and penetration testing

Collect security process data including account management and key performance indicators

Analyse test output and generate remediation reports with ethical disclosure

Conduct or facilitate internal, external and third-party security audits

Security Operations

5 Topics

Understand and comply with investigation procedures and digital forensics

Conduct logging and monitoring activities: SIEM, IDPS and threat intelligence

Apply foundational security operations concepts: least privilege and separation of duties

Conduct incident management: detection, response, mitigation and recovery

Implement disaster recovery processes and business continuity planning

Software Development Security

5 Topics

Understand and integrate security throughout the Software Development Life Cycle (SDLC)

Identify and apply security controls in software development ecosystems and CI/CD

Apply static and dynamic application security testing (SAST/DAST)

Assess security impact of acquired software: COTS, open source and cloud services

Define and apply secure coding guidelines and software-defined security standards

FAQs

Frequently Asked Questions

What is the CISSP certification?

The CISSP (Certified Information Systems Security Professional) is ISC2's flagship certification — widely regarded as the gold standard in cybersecurity. It validates your expertise across eight security domains, proving your ability to design, implement and manage enterprise-wide security programmes.

How much experience is needed for CISSP?

Candidates need five years of cumulative paid work experience in two or more of the eight CISSP domains. A four-year college degree or an approved credential from the ISC2 prerequisites list can substitute for one year of the experience requirement.

What is the CISSP exam format?

In English, CISSP uses Computerised Adaptive Testing (CAT) with 125–175 questions over 240 minutes. In other languages, it is a linear exam with 250 questions over 360 minutes. A score of 700 out of 1000 is required to pass.

What is the Associate of ISC2?

If you pass the CISSP exam but haven't yet met the experience requirement, you become an Associate of ISC2. You then have up to six years to earn the required five years of experience and gain full CISSP certification.

What jobs does CISSP open up?

CISSP holders pursue senior roles such as Chief Information Security Officer (CISO), Security Director, Security Architect, Security Manager, Security Consultant and IT Director. It is particularly valued in executive and management positions.

What CISSP concentration certifications are available?

After earning the CISSP, you can pursue ISC2 concentration certifications: ISSAP (Architecture), ISSEP (Engineering) and ISSMP (Management). These advanced credentials further distinguish your expertise in a specific security discipline.

ISC2 Certified Information Systems
Security Professional (CISSP)

The World's Most Recognised Cybersecurity Credential

ISC2 Certified Information Systems Security Professional (CISSP)

CISSP — Certified Information Systems Security Professional

CISSP — Certified Information Systems Security Professional Exam Details

Complete CISSP Curriculum

Frequently Asked Questions

Earn the World's Most Recognised Cybersecurity Credential

ISC2 Certified Information SystemsSecurity Professional (CISSP)

The World's Most Recognised Cybersecurity Credential

ISC2 Certified Information Systems Security Professional (CISSP)

CISSP — Certified Information Systems Security Professional

CISSP — Certified Information Systems Security Professional Exam Details

Complete CISSP Curriculum

Frequently Asked Questions

Earn the World's Most Recognised Cybersecurity Credential

ISC2 Certified Information Systems
Security Professional (CISSP)