CISSP Resources · Study strategy
CISSP Study Plan for Busy Professionals (8–12 Weeks)
Most CISSP candidates study around a full-time job. This plan assumes 5–8 hours a week and runs 8 to 12 weeks depending on your background. It favours short daily practice over long weekend cramming, because spaced practice sticks.
The weekly rhythm
| When | Time | What to do |
|---|---|---|
| Weekdays (4 days) | 30–45 min | Read one topic, then 15–20 practice questions on it |
| One weekday | 30 min | Review every wrong answer from the week |
| Weekend | 2–3 hours | Mixed-domain set of 50+ questions and deeper reading on weak spots |
Twenty questions on a busy day beats zero. Missing a whole week is what derails plans, not a short session.
12-week plan (adjust to 8 weeks if you have broad experience)
| Weeks | Focus | Practice target |
|---|---|---|
| 1–2 | Domain 1: Security and Risk Management | ~150 questions |
| 3 | Domain 2: Asset Security + Domain 5: IAM | ~120 questions |
| 4–5 | Domain 3: Security Architecture and Engineering | ~150 questions |
| 6 | Domain 4: Communication and Network Security | ~100 questions |
| 7 | Domains 6 and 7: Assessment and Operations | ~120 questions |
| 8 | Domain 8 + first full mock exam | ~80 questions + mock |
| 9–10 | Weakest two domains from the mock | ~150 targeted questions |
| 11 | Domain 1 second pass + second mock | ~100 questions + mock |
| 12 | Light review, adaptive practice, rest before exam | Short daily sets |
For the 8-week version, combine weeks 1–2, 4–5 and 9–10 into single weeks, and keep the two mock exams.
Making it work around work
- Use your phone for question sets on commutes and breaks; save reading for focused time.
- Tell your manager or family your exam date — it makes protecting study time easier.
- Book the exam once you're about halfway through. A fixed date keeps the plan honest.
- If work gets heavy, cut reading before you cut practice questions.
For a longer, more detailed plan see the CISSP study guide and how long to study for the CISSP. Drill each domain on its own with the CISSP practice questions by domain.
Frequently asked questions
Can I pass the CISSP studying 1 hour a day?
Many working professionals do, especially with solid security experience. Consistency matters more than long sessions — plan for 8 to 12 weeks and adjust based on mock exam results.
How many practice questions should I do per day?
Around 15 to 30 on weekdays, with a larger mixed set at the weekend, is sustainable for most busy candidates. Review every wrong answer.
Study in short sessions that actually add up
Domain Eight gives you quick domain practice, adaptive sessions and a readiness score that shows whether your plan is working.
Related guides
- Why People Fail the CISSPThe predictable traps that cause retakes, and what to do instead.
- Domain 1: Security and Risk ManagementGovernance, risk treatment, law and ethics — the domain that teaches you to think like a manager.
- Domain 2: Asset SecurityClassification, ownership roles, data lifecycle, retention and secure disposal.
- Domain 3: Security Architecture and EngineeringSecure design principles, models, cryptography, and physical security. The heaviest technical domain.
More CISSP study material from Domain Eight: browse all resources.