CISSP Certification Guide for Beginners
·11 min read
A plain-English beginner's guide to CISSP — the eight domains, CAT exam format, experience rules, costs and the exact process from booking to endorsement.
Continue readingA realistic week-by-week CISSP study timetable for people working full time — weekday micro-sessions, weekend blocks, and how to recover when work takes over.

Picture the typical CISSP candidate: a systems or security professional somewhere past the five-year experience mark, working 40-plus hours a week, quite possibly with a family, whose last serious exam was years ago. The single biggest predictor of whether that person reaches test day is not intelligence or even experience — it is whether their study schedule was designed for the life they actually live. A plan that assumes three free hours every evening fails by week two; a plan built around a working week can run for months.
This article gives you that plan: a weekly rhythm that survives a full-time job, a twelve-week timetable you can stretch or compress, and the recovery tactics for the weeks when work eats everything. It deliberately does not re-explain what the eight domains contain — that is covered in CISSP exam domains explained — and the question of total preparation time by experience level has its own guide on how long CISSP preparation takes.
Before you assign a single study block, audit a normal week honestly. Working professionals consistently overestimate evening availability (you are tired, dinner happens, life happens) and underestimate three other pockets:
A sustainable working-professional baseline looks like roughly an hour a day on weekdays — split into one focused block and scraps of dead time — plus one longer weekend session. Precisely how many total hours you need depends on your background; resist copying anyone else's number and calibrate against practice results instead.
Every week of the timetable below runs on the same repeating pattern. Consistency of shape is the point: decisions drain willpower, and a schedule you do not have to renegotiate nightly is one you keep.
That pattern yields roughly six to eight productive hours a week without demanding heroics from any single day — and it is robust: lose an evening and the week still stands.
Twelve weeks at the rhythm above suits many working candidates with solid experience across several domains; stretch it towards sixteen or more if much of the material is new to you, and shorten it only if early practice scores argue for it. The weeks are organised into four phases. Which order you take the domains in is its own decision — our CISSP study plan framework covers sequencing logic in depth; the timetable here governs pace.
| Weeks | Phase | What the blocks contain |
|---|---|---|
| 1 | Baseline and setup | Skim the official exam outline, sit an untimed diagnostic question set across all domains, book your weekend block into the family calendar for twelve weeks |
| 2–7 | First pass | Work through all eight domains — weekday blocks for reading and notes, weekend blocks for the domain you find hardest that fortnight, micro-reps on everything already covered |
| 8–9 | Consolidation | No new material; revisit the three weakest domains from your logs, convert notes into self-test questions, lengthen weekend question sets |
| 10–11 | Practice-exam phase | Full-length timed practice tests in the weekend block, weekday blocks spent reviewing every wrong and lucky-right answer by domain |
| 12 | Taper and sit | Light review only, no new topics, no marathon cramming; protect sleep, then take the exam early in your freshest part of the day if scheduling allows |
Three notes on making the middle weeks work:
Since April 2024 the CISSP has been a Computerized Adaptive Test (CAT): 100–150 questions, a three-hour maximum, and no going back to a previous question. That format has two direct consequences for a working professional's final fortnight. First, your practice tests must be timed and taken in one sitting — a Saturday morning, realistically — because three hours of sustained decision-making is a stamina event your weekday blocks cannot rehearse. Second, train the habit of committing to an answer and moving on; the review-later instinct that serves you in meetings will hurt you in a CAT.
Use full-length simulations to benchmark, then spend the weekday blocks between them dissecting results by domain. ExamPractice's CISSP practice test simulation supports that loop — timed sessions, then per-domain review of what you got wrong and why. How to interpret scores and set targets is a topic of its own, covered in our CISSP practice test strategy guide.
It will — a release, an audit, an incident, a quarter-end. Plan the failure modes now:
Do not start with a bookshop order. Start with the audit: this week, log where your hours genuinely go, choose your four weekday slots and your weekend block, and put them in the calendar as recurring appointments. Next week, run week 1 of the timetable — outline, diagnostic, booking the block — and let the diagnostic tell you whether twelve weeks or sixteen is your honest number. A working professional who protects six imperfect hours a week for three months arrives at test day better prepared than the candidate who planned fifteen and delivered four. The schedule is the strategy; everything else is detail.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·11 min read
A plain-English beginner's guide to CISSP — the eight domains, CAT exam format, experience rules, costs and the exact process from booking to endorsement.
Continue reading·9 min read
A practical CISSP exam preparation guide covering the managerial mindset, how to choose study materials, and how to use practice tests to measure readiness.
Continue reading·7 min read
What actually makes the CISSP exam hard — breadth, adaptive testing and managerial judgement — who struggles most, and how it compares with SSCP and CCSP.
Continue reading