CISSP Exam Pass Rate, Format & Study Guide

The ISC2 CISSP exam outline effective April 15, 2024 lists eight domains: Security and Risk Management (16%), Asset Security (10%), Security Architecture and Engineering (13%), Communication and Network Security (13%), Identity and Access Management (13%), Security Assessment and Testing (12%), Security Operations (13%) and Software Development Security (10%). The passing score is 700 out of 1000 points, and the exam includes multiple-choice and advanced item types. ISC2 offers the exam in Chinese, English, German, Japanese and Spanish, and describes an adaptive (CAT) format for the English exam on its CISSP-CAT page; the portal mock is a fixed 150-question practice set. The ISC2 outline page notes a successor outline taking effect on April 15, 2027.

The CISSP is one of the most widely requested senior information security credentials.

Security practitioners, managers, architects and consultants who are preparing for the CISSP.

The certifying body does not publicly publish an official pass rate for this exam. Be wary of third-party sites citing a specific number here — treat any pass-rate claim you see elsewhere for this exam as unverified.

Retake rules and waiting periods are set by ISC2; check the current ISC2 retake policy before you reschedule.

The passing score is 700 out of 1000 points; a scaled score is not a percentage of correct answers, so the percent score in the portal mock is only a self-check. Format: up to 150 questions in 3 hours on computer; the portal mock uses a fixed 150 questions in 180 minutes. No official pass rate is available for this exam, so none is quoted here.

The ISC2 CISSP exam outline effective April 15, 2024 lists eight domains: Security and Risk Management (16%), Asset Security (10%), Security Architecture and Engineering (13%), Communication and Network Security (13%), Identity and Access Management (13%), Security Assessment and Testing (12%), Security Operations (13%) and Software Development Security (10%). The passing score is 700 out of 1000 points, and the exam includes multiple-choice and advanced item types. ISC2 offers the exam in Chinese, English, German, Japanese and Spanish, and describes an adaptive (CAT) format for the English exam on its CISSP-CAT page; the portal mock is a fixed 150-question practice set. The ISC2 outline page notes a successor outline taking effect on April 15, 2027. Up to 150 questions · 3 hours · computer-based · scaled score of 700 on 1000 to pass · eight domains. The passing score is 700 out of 1000 points; a scaled score is not a percentage of correct answers, so the percent score in the portal mock is only a self-check.

• Security and Risk Management16%
• Asset Security10%
• Security Architecture and Engineering13%
• Communication and Network Security13%
• Identity and Access Management (IAM)13%
• Security Assessment and Testing12%
• Security Operations13%
• Software Development Security10%

The content outline spreads questions across 8 areas: Security and Risk Management (16.0%); Asset Security (10.0%); Security Architecture and Engineering (13.0%); Communication and Network Security (13.0%); Identity and Access Management (IAM) (13.0%); Security Assessment and Testing (12.0%); Security Operations (13.0%); Software Development Security (10.0%).

ISC2 publishes the work-experience and endorsement requirements for the CISSP on its certification page. Read the current requirements there before you register.

ISC2 publishes exam prices by region, and taxes depend on where you test. An annual maintenance fee applies once you are certified. The amounts change, so no figure is quoted here.

Holding the CISSP involves an ISC2 annual maintenance fee and continuing professional education credits; check the current ISC2 rules.

Start with Security and Risk Management, then work through the 13% domains, finish with Asset Security and Software Development Security, and take timed 150-question runs.

This guide follows the ISC2 CISSP exam outline effective April 15, 2024 and the ISC2 CISSP-CAT page, checked October 31, 2026. A successor outline takes effect on April 15, 2027, so check the ISC2 site for the version you will sit.