CISSP Exam Scheduling Guide: Book Your Test 2026

Confirming Your Eligibility Before You Schedule

Booking a CISSP seat before verifying your eligibility is a costly mistake-literally. At $749 per attempt, you want to be certain you qualify before entering a credit card number. ISC2 has two distinct pathways, and understanding which one applies to you determines whether you schedule a full CISSP exam or begin as an Associate of ISC2.

The Five-Year Experience Requirement

The standard route requires five years of cumulative, paid work experience in at least two of the eight CISSP domains. The domains are not interchangeable buckets-ISC2 expects experience that maps directly to the official exam outline. The eight domains are:

• Domain 1: Security and Risk Management - risk frameworks, legal and regulatory compliance, security governance, ethics
• Domain 2: Asset Security - data classification, ownership models, privacy protection, secure data handling
• Domain 3: Security Architecture and Engineering - secure design principles, cryptography, physical security, vulnerability mitigation
• Domain 4: Communication and Network Security - secure network architecture, transmission protocols, channel protection
• Domain 5: Identity and Access Management (IAM) - authentication mechanisms, access control models, identity federation
• Domain 6: Security Assessment and Testing - audit strategies, penetration testing, log reviews, vulnerability assessments
• Domain 7: Security Operations - incident response, forensics, disaster recovery, patch management
• Domain 8: Software Development Security - secure SDLC, code review, application vulnerabilities, DevSecOps

If you hold a four-year college degree or an approved credential from ISC2's list, you may substitute one year of the five-year requirement-reducing the experience demand to four years.

The Associate of ISC2 Route

If you don't yet meet the full experience threshold, you can still sit the exam. Candidates who pass but lack the required experience earn the "Associate of ISC2" designation and have six years to accumulate the qualifying work history. This path is popular among security analysts and recent graduates who want to demonstrate knowledge now and convert to full CISSP status as their careers develop.

Step-by-Step: How to Register Through Pearson VUE

ISC2 uses Pearson VUE as its exclusive testing provider for the CISSP. The registration process runs through both platforms, and skipping steps on either side causes delays.

1. Create or log in to your ISC2 candidate account at isc2.org. This is where you accept the exam agreement and pay the $749 fee directly to ISC2.
2. Receive your Pearson VUE eligibility confirmation. After ISC2 processes your payment and application, they transmit an eligibility record to Pearson VUE. This typically takes one to two business days but can be longer during peak periods.
3. Schedule through Pearson VUE. Log in to pearsonvue.com/isc2, select the CISSP exam, choose your delivery method (test center or online proctored), and pick your date and time. You'll see real-time seat availability across thousands of global locations.
4. Confirm your appointment and review the policies. Pearson VUE will email a confirmation. Save it. Review the identification requirements carefully-name mismatches between your ID and your registration are grounds for denial of entry.

Scheduling well in advance, particularly for popular metro-area test centers, is strongly advisable. Seats at convenient times often fill several weeks out, especially in Q1 and Q4 when many professionals aim to complete certifications before fiscal year benchmarks.

The $749 Fee: What It Covers and What It Doesn't

The $749 USD exam fee is paid to ISC2 at the time of registration-not to Pearson VUE. This fee covers one exam attempt. It does not cover study materials, practice tests, official ISC2 training courses, or any post-exam processes like endorsement.

ISC2's retake policy imposes a 30-day waiting period after a first failure, a 60-day wait after a second failure, and a 90-day wait after a third. A fourth failure within a 12-month window bars you from testing for that full year. Each retake requires a new $749 payment. These stakes make thorough preparation-including consistent practice testing at cissptest.com-a financial priority, not just an academic one.

Understanding the CAT Format Before Test Day

The English-language CISSP uses Computer Adaptive Testing. This is not a standard linear exam. Every candidate starts with questions of moderate difficulty. The algorithm adjusts the difficulty of subsequent questions based on your running performance. If you answer correctly, the next question is harder; an incorrect answer prompts an easier follow-up.

The exam ends when one of two conditions is met: the algorithm reaches 95% statistical confidence that you are either clearly above or clearly below the 700-point passing threshold, or you hit the 150-question maximum. The minimum number of items you'll see is 100. The total time limit is three hours.

The question pool includes both multiple-choice items and advanced innovative items. Advanced innovative formats include drag-and-drop, hotspot, and other scenario-based interactions that test applied judgment rather than recall. ISC2 designs these items specifically to assess how an experienced security professional thinks-not just what they've memorized. This is why domain-specific scenario practice on platforms like cissptest.com is far more predictive than flashcard drills alone.

Mapping the Eight Domains to Your Prep Calendar

One of the most common scheduling errors candidates make is treating all eight CISSP domains as equally weighted. They are not. The exam outline assigns specific percentages, and your study calendar should reflect those proportions.

For a candidate preparing over 12-16 weeks, a proportional calendar looks roughly like this:

This structure uses spaced repetition at the domain level: you revisit Domain 1 material during the Security Operations and Assessment weeks because risk language appears across all domains. Deliberate cross-domain review is more aligned with CISSP's "managerial lens" philosophy than siloed study blocks.

Test Center vs. Online Proctored: Choosing Your Environment

Pearson VUE offers both physical test center appointments and online-proctored delivery for the CISSP. Each has meaningful tradeoffs for a three-hour adaptive exam.

For a high-stakes exam like the CISSP-where a failed attempt means another $749 and weeks of waiting-the test center is the lower-risk choice for most candidates. Online proctoring is a legitimate option for those with reliable, isolated workspaces and strong internet connections, but ISC2's security rules (covered below) are enforced just as strictly in remote sessions.

ISC2 Exam Security Rules You Cannot Ignore

ISC2 takes exam integrity seriously, and Pearson VUE enforces these policies on their behalf. Violations can result in immediate score cancellation and a ban from future ISC2 exams-outcomes far worse than a failed attempt.

• No personal items at the workstation: Phones, watches (including smartwatches), notes, and study materials must be secured. Test centers provide lockers; online proctors will scan your workspace via webcam.
• Government-issued photo ID required: The name on your ID must exactly match your Pearson VUE registration. Middle name discrepancies have caused candidates to be turned away.
• No communication during the exam: You may not speak aloud, reference any material, or communicate with anyone during the three-hour session.
• NDA agreement: You will be asked to accept ISC2's Non-Disclosure Agreement before your exam begins. This legally binds you from sharing specific question content.
• Break policies: Unscheduled breaks are permitted but the exam clock continues running.

After the Exam: Endorsement, Certification, and Renewal

Passing the CISSP exam is not the final step. ISC2 requires an endorsement process before your certification is officially active. A current CISSP in good standing must verify your professional experience-or ISC2 itself can serve as endorser in some circumstances. The endorsement application must be submitted within nine months of passing the exam.

Once certified, your CISSP credential is valid for three years. Maintaining it requires earning 120 Continuing Professional Education (CPE) credits over the three-year cycle and paying the Annual Maintenance Fee to ISC2 each year. Missing these obligations has consequences-and they're not always immediately obvious. For a detailed breakdown of what happens if you let deadlines slip, read our article on the CISSP Renewal Grace Period: What Happens If You Miss.

CPE credits must be distributed across ISC2's recognized categories. Group A credits must relate directly to the CISSP domains; Group B credits cover broader professional development. Candidates who plan their CPE strategy early-logging credits from security conferences, webinars, and publications throughout the cycle-avoid the stressful scramble in year three.

For candidates still in the planning phase who want a complete picture of the scheduling process from eligibility check through test day, the CISSP Exam Scheduling Guide: Book Your Test 2026 covers every procedural step in sequence. Combining that procedural roadmap with domain-targeted practice at cissptest.com gives you both the logistical clarity and the exam-ready knowledge base you need.

Frequently Asked Questions