Skip to content
CBT Nuggets
DemoBook a Demo
ISC2Professional

CISSP – Certified Information Systems Security Professional

Standardize your team on CISSP – Certified Information Systems Security Professional with a structured ISC2 training path — a blueprint-weighted practice exam and team admin reporting included on every CBT Nuggets Teams seat.

1
Course
1
Practice exam
8
Core skills
$749
Exam fee (ISC2)
Security operations center analysts monitoring threat dashboards
Difficulty
Difficulty: 4 of 5 (Advanced)
Advanced
Exam fee (ISC2)
$749
Courses on path
1
Exam code
  • CISSP

Exam datasheet

Format
Computerized Adaptive Testing (CAT); multiple choice and advanced item types
Prerequisites
Minimum five years cumulative, full-time experience in two or more CISSP domains
Recommended experience
Experienced security practitioners, managers and executives
Recertification
3 years

Exams

Exams for this certification

Exam fees per engineer, paid to the exam vendor$749

Exam — Required

Every engineer on the CISSP – Certified Information Systems Security Professional path takes CISSP.

  1. CISSPCertified Information Systems Security Professional (CISSP)Practice exam included on every Teams seat
    Exam fee
    $749
    Exam length
    3 hours
    Questions
    100-150
    Passing score
    700 out of 1000 points

    Exam blueprint: CISSP

Skills your team builds

Security and Risk ManagementAsset SecuritySecurity Architecture and EngineeringCommunication and Network SecurityIdentity and Access Management (IAM)Security Assessment and TestingSecurity OperationsSoftware Development Security

Every certification course includes

  • Expert-led video training
  • Certification practice exams
  • Per-team completion reporting

ISC2 career ladder

Where CISSP – Certified Information Systems Security Professional sits in your team's ISC2 progression

The cert your team is on now, plus the levels above and below. Use this to map an engineer's next-step credential or to plan headcount coverage across tiers.

  1. Professional level

    2 certs

    CCSP – Certified Cloud Security Professional

    CCSP

    CISSP – Certified Information Systems Security Professional

    CISSP

    You are here

Compliance frameworks this training supports

Where CISSP – Certified Information Systems Security Professional skills fit your compliance program

The compliance frameworks whose controls draw on the skills CISSP – Certified Information Systems Security Professional training builds, with the control families the certification’s learning objectives address. A planning aid for mapping training to your program, not evidence that a requirement is met.

  • FrameworkSOC 2
    Control families
    CC1CC2CC6CC7CC8
  • FrameworkHIPAA
    Control families
    164.308164.310164.312
  • FrameworkPCI DSS
    Control families
    Req 12
  • FrameworkCMMC L2
    Control families
    ACATAUIAIRRASCSI
  • FrameworkISO 27001
    Control families
    A.5A.8A.9A.12A.13A.14A.16
  • FrameworkNIST 800-53
    Control families
    ACATAUCPIAIRPLRASCSI

Mappings reflect the certification’s stated learning objectives against published framework control families. CBT Nuggets is a training platform. Our courses build the skills these frameworks depend on, and our completion records document the workforce training many of them require. Training supports a compliance program; it does not by itself make an organization compliant. Your compliance program and its assessors decide what counts as evidence. Pair this table with your auditor’s control crosswalk for the mapping your review requires.

Customer outcome

Build CISSP capability across the whole team, not one engineer

Assign the CISSP – Certified Information Systems Security Professional course to the engineers who need it, and the team report shows who has started, who has finished, and who has passed the practice exam — the view leadership uses to see ISC2 skills coverage across the team and where the gaps are.

Team capability

Make CISSP a number on your team capability sheet, not a single engineer’s certificate.

Standardizing your team on CISSP gives leadership a clear picture of ISC2 skills coverage — who has completed the training, who is still on the path, and where the gaps are — so staffing and escalation plans rest on known capability instead of on one engineer.

Credential: CISSP – Certified Information Systems Security Professional

Exam
  • CISSP

Frequently asked questions about CISSP – Certified Information Systems Security Professional training

Common questions IT directors ask when evaluating CISSP – Certified Information Systems Security Professional training for their team.

How does CISSP fit a security governance or compliance program?

Teams commonly cite CISSP when documenting training coverage for security governance, risk and policy responsibilities, since the linked course covers governance and compliance, risk management and security controls, and investigations, policy development and BCP. The formal mapping to any framework or control set is decided by the organization's auditor and its control crosswalk, and team reporting provides completion exports IT leaders can add to audit evidence.

Who on the security team should hold CISSP, and what can a certified team own?

IT leaders typically assign CISSP to the senior practitioners, architects and security managers who set direction across the program. Based on the linked course, a certified team can own governance and risk management, security controls and threat modeling, asset security, secure design and cryptographic solutions, facility and network security across wireless, SDN and VPCs, and the organization's identity and authentication strategy.

What does CBT Nuggets CISSP – Certified Information Systems Security Professional training include for a team?

CBT Nuggets CISSP – Certified Information Systems Security Professional courses are built by named expert trainers. Where a course includes hands-on virtual labs or a practice exam mapped to ISC2's published exam objectives, the course list on this page says so. Team admin reporting tracks assignment, completion and exam readiness per engineer — the view managers use to run a team training program.

How do I assign and track CISSP – Certified Information Systems Security Professional training for my team?

From the admin console, managers assign the CISSP – Certified Information Systems Security Professional courses directly to specific engineers or role groups and track completion and practice-exam scores per learner. Team-wide reporting rolls up to a single dashboard you can review or export for leadership reviews or compliance reporting.

How long does it take to prepare a team for CISSP?

The linked CBT Nuggets training runs about 22 hours of video across the live courses, which gives IT leaders a planning baseline. Actual time to certify depends on each team member's starting point in security governance, architecture and networking, and on how much time the team can give the training each week.

What if ISC2 updates the CISSP – Certified Information Systems Security Professional exam objectives?

CBT Nuggets updates ISC2 course content as exam objectives refresh, and this page shows the current exam's status and any retirement date the vendor has announced. When ISC2 restructures or renames a track, the assigned training stays aligned with the same team training plan, and the training stays current without anyone losing their progress mid-stream.

Ready to CISSP – Certified Information Systems Security Professional-certify your team?

Build CISSP – Certified Information Systems Security Professional capability across your team

See how CBT Nuggets helps IT leaders plan and track CISSP – Certified Information Systems Security Professional training across the team — a practice exam and reporting included.