Preparing for the CISSP exam: domains, study plan and free revision notes
CISSP is one of the most respected certifications in information security. Here is how to approach the exam, with free revision notes.
Updated October 2026 · 5 min read
The Certified Information Systems Security Professional (CISSP) certification from ISC2 is recognised worldwide. It shows that a professional can design, implement and manage a security programme, which makes it valuable for senior and management roles.
The eight CISSP domains
- Security and Risk Management
- Asset Security
- Security Architecture and Engineering
- Communication and Network Security
- Identity and Access Management
- Security Assessment and Testing
- Security Operations
- Software Development Security
Experience requirements
ISC2 requires cumulative paid work experience in at least two of the eight domains, with a reduction for certain degrees or credentials. Candidates who pass without the experience can become an Associate of ISC2 while they gain it. Check the current requirements on the ISC2 website before you book.
A practical study plan
- Review the official exam outline to see the weighting of each domain.
- Work through an official study guide, one domain at a time.
- Take your own notes. Writing summaries helps you remember.
- Use practice questions to find weak areas, then revisit them.
- Think like a manager: many questions ask for the best decision, not the most technical one.
Free CISSP revision notes
These revision notes, written by a CISSP-certified professional, summarise key points from the study material. Please read the author's disclaimer in the file to understand their scope and limitations.
Related serviceAdvisory & GovernancevCISO, risk assessments, compliance roadmaps and security strategy for leadership teams.Explore advisory →Frequently asked questions
How hard is the CISSP exam?
It is considered challenging because of its breadth. Most candidates study for several months.
What format is the exam?
The English exam uses computerised adaptive testing. Check ISC2 for the current number of questions and time allowed.
Do I need experience before taking the exam?
You can take the exam without it, but full certification requires the required work experience.
How do I maintain CISSP?
By earning continuing professional education (CPE) credits and paying the annual maintenance fee.