CISSP Retake Preparation Guide

Failing the Certified Information Systems Security Professional (CISSP) exam is common enough that ISC2 designs for it: your result letter includes domain-by-domain proficiency feedback precisely so that a second attempt can be targeted rather than a repeat of the first. The retake process has three parts — understand the rules and costs, diagnose why the first attempt fell short, and rebuild a shorter, narrower plan around that diagnosis. Do those three things and a retake is usually a matter of weeks of focused work, not a restart of the whole programme.

Consider a fairly typical case. A security engineer with six years' experience studies for three months, feels strong on the technical domains, and fails. Her feedback sheet shows "below proficiency" on Security and Risk Management and Security Assessment and Testing, "near proficiency" on two more, and "above proficiency" everywhere else. Restarting her three-month plan from the beginning would be the worst possible response — most of it targets domains she has already banked. What she needs is four to six weeks aimed at two domains and at the managerial question style that likely sat behind both. This guide is the general version of that move.

Step 1: Read your result the way ISC2 wrote it

CISSP results are pass/fail only. Because the exam is Computerized Adaptive Testing (CAT), you do not receive a numerical score at all — what an unsuccessful candidate receives instead is feedback showing, for each of the eight domains, whether you performed below, near or above proficiency.

Extract three things from that sheet:

• Your "below proficiency" domains. These are your primary study targets. Weight your retake plan heavily towards them.
• Your "near proficiency" domains. These are cheap wins — often one focused week each.
• The pattern across them. Weak domains frequently cluster around a theme. Weakness in Security and Risk Management plus Security Assessment and Testing, for instance, often signals a broader issue: answering as an engineer rather than as a risk-driven security manager. Naming the theme matters more than naming the domains.

What the sheet cannot tell you is why you underperformed — knowledge, question technique, pacing or nerves. That diagnosis is yours to make in Step 3.

Step 2: Know the retake rules before you plan dates

Two cost facts are worth fixing in mind immediately. As of 2026, ISC2 charges the full exam fee for a retake — $749 USD in the Americas for CISSP, varying by country and region — plus a $50 USD fee if you later reschedule the new appointment and $100 USD to cancel it. A retake is a meaningful purchase; the preparation behind it deserves matching seriousness.

On timing: ISC2 imposes a waiting period between attempts and limits how many attempts you may make within a period. The specific waiting periods have changed over the years and are frequently misquoted in forums, so do not plan around second-hand numbers — check the current retake policy on ISC2's official site before you pick a target date, and build your plan backwards from a date the policy actually allows.

Treat the enforced wait as a feature. The gap between attempts is usually enough time to fix two or three weak domains properly — and rarely enough to justify starting from zero, which you should not do anyway.

One reassurance while you are reading policies: failing the exam has no effect on your eligibility. Your experience qualification (or Associate of ISC2 route, if you are testing before the five years) is unchanged, and the nine-month endorsement clock only ever starts after a pass.

Step 3: Diagnose the failure honestly

There are four distinct ways to fail the CISSP, and they have four different cures. Most candidates who fail twice do so because they treated every failure as a knowledge problem.

Knowledge gaps

Signs: your weak domains match topics you genuinely rushed or skipped; during the exam you met material you simply did not recognise.

Cure: targeted restudy of those domains from a proper source — not question banks alone. For what each domain covers and how it is weighted since the April 2024 outline refresh, see the CISSP exam domains explained.

Question-style mismatch

Signs: you knew the material but kept narrowing to two answers and picking the wrong one; first/best/most qualifiers tripped you; technical answers kept losing to governance answers.

Cure: deliberate question technique work — analysing why credited answers beat tempting distractors, one question at a time. This is a practice-question skill, and the review protocol in our CISSP practice test strategy is built for exactly this.

Pacing and stamina

Signs: quality collapsed in the final hour; you rushed the closing stretch; the three-hour, up-to-150-question CAT format itself wore you down; the inability to revisit questions kept you ruminating on earlier answers.

Cure: full-length timed rehearsal under real conditions before the retake — one sitting, no backtracking, stamina treated as a trained capacity.

Nerves and circumstances

Signs: you were performing well in practice but froze on the day, slept badly, arrived rattled, or sat the exam during a personally chaotic week.

Cure: mostly logistical and psychological — rehearsed routines, a calmer run-in, and a better-managed exam day. The CISSP exam day checklist handles that layer, so this guide will not.

Write your diagnosis down in two or three sentences. Every planning decision that follows should trace back to it.