AdvancedGovernance and riskDefence and SOCSecure development

CISSP

Certified Information Systems Security Professional · ISC2

The CISSP is the best-known security certification in the world: it proves a broad, management-level grasp of the eight domains of information security, backed by five years of verified experience. It appears in countless job ads for CISOs, security architects and consultants, in France as elsewhere, and opens doors in large organisations and the public sector. Its strength is that breadth and the experience requirement; its limit is that it tests judgement and theory, not technical skills, and the syllabus is very wide.

Exam
Computerised adaptive test (CAT): 100 to 150 questions in 3 h, pass mark 700/1,000. Exam outline in force since 15 April 2024; no new outline announced.
Exam price
$749€719.04 in Europe, £606.69 in the United Kingdom.
Required experience
Five years of cumulative full-time paid experience in at least two of the eight domains; a degree or an approved credential can waive one year. Without it, pass the exam and become an Associate of ISC2, with six years to gain the experience.
Validity and maintenance
3-year cycle: 120 CPE credits (40 per year) and an annual maintenance fee of US$135, a single fee however many ISC2 certifications you hold.
Format
Adaptive multiple choice
Recognition
ISO/IEC 17024 accredited · DoD 8140 approved

Who is it for?

Experienced professionals (five years or more) moving towards CISO, security manager, architect or senior consultant roles. Juniors can pass the exam and become Associates of ISC2 while they build up experience.

Domains covered

  • Security and risk management: 16%
  • Asset security: 10%
  • Security architecture and engineering: 13%
  • Communication and network security: 13%
  • Identity and access management: 13%
  • Security assessment and testing: 12%
  • Security operations: 13%
  • Software development security: 10%

Belinda’s take

Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.

Official site

The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.

All certifications

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.