CISSP study plan: 30, 60 and 90 days, or six months

Choose your timeline

Your timeline depends on two things: how many hours you can give each week and how many domains are new to you. Be honest about both. A plan that assumes free weekends usually breaks by week three.

A note on total hours

There is no official figure for how long preparation takes. As a planning assumption, someone with several years across many domains might need around 120 hours; someone crossing over from a non-technical role may need 200 or more. Use your diagnostic to place yourself, then adjust after the first rehearsal.

For working professionals in India

Most of our readers study around a full-time job, often with long commutes and family time in the evening. Three patterns work well:

• Early mornings. 6:15 to 7:00 before the day starts is the most reliable slot for reading and drills.
• The commute. Fifteen minutes of flashcards on the metro or in a cab in Bengaluru or Hyderabad traffic adds up to over an hour a week.
• After dinner. A 30-minute drill or explanation review, not new reading, when energy is lower.

If you are aiming to finish before an appraisal cycle, work backwards from that date and leave a buffer of four weeks for a possible move of the exam date.

How to weight the domains

Spend your hours roughly in proportion to each domain's share of the exam, then move about a fifth of the total towards your weakest domains. These are the current weights; if your exam is on or after 15 April 2027, use the new column.

Template: 90 days (12 weeks), 8–10 hours a week

This is our default for working professionals with some security experience.

Every week, keep three habits running alongside the focus domain: daily flashcards, a mixed drill of earlier domains once a week, and a review of your mistakes log.

Template: 60 days (8 weeks), 12–15 hours a week

Suits candidates who already work across several domains.

Template: 30 days, 20 hours a week or more

Only realistic if you have broad experience, have studied before, or are retaking. Treat it as revision, not first learning.

If the day 24 rehearsal is not clearly above the line, move the exam. A month is tight, and a retake costs more than a short delay.

Template: six months, 5–6 hours a week

For people crossing over from non-technical roles, new parents, or anyone with an unpredictable job.

With a longer plan, forgetting is the main risk. Daily flashcards and a weekly mixed drill across everything studied so far matter more than in a short plan.

What a study week looks like

Here is one way to spend 8 to 10 hours in a week around a full-time job. Move the blocks to fit your shifts; keep the mix.

That adds up to about eight and a half hours. On a rehearsal weekend, replace Saturday and Sunday with one full rehearsal and its review.

Adjusting the plan as you go

A plan is a hypothesis. Each rehearsal and each week of drills is evidence that should change it.

After a rehearsal

• One domain clearly behind: give it the next week's focus slot, and add it to every mixed drill.
• Even but below the line: you need more practice volume, not more reading. Shift time from reading to drilling and explanation review.
• Strong but faded in the second half: stamina, not knowledge. Add longer sessions and another full rehearsal.
• Many sure-but-wrong answers: you are misreading or over-trusting your instinct. Slow down and add mindset drills.

If you fall behind

Life happens: a release, a family wedding, an audit at work. Do not try to catch up by doubling the next week; that usually ends the plan. Instead:

1. Keep the daily flashcards going, even if nothing else happens.
2. Drop the lowest-weight topic you are already comfortable with to a single review session.
3. Push the exam date if the first rehearsal is less than three weeks away and you have lost more than a week.

When to take full mocks

A full rehearsal takes up to 3 hours and a lot of energy, so place them deliberately.

• Not too early. A full rehearsal before you have covered most domains mainly tells you what you have not studied yet. The diagnostic already did that.
• First one at about two thirds. It shows how you hold up over a full sitting and which domains are still weak.
• Then every two to three weeks. Each one should change your plan for the next fortnight.
• The last one five to seven days before the exam. Late enough to be current, early enough to recover.
• Use questions you have not seen. Repeating a familiar test measures memory, not readiness.
• Rehearse under the real rules: adaptive selection, 100–150 items, no going back, and a clock that keeps running through breaks. The CAT page explains each rule.

The last two weeks

1. No new material. Revise what you have; new topics at this stage add worry, not marks.
2. Weak domains first. Use your rehearsal reports to pick two or three subdomains and drill them.
3. Mindset drills daily. Short sets of technician-versus-manager questions keep the habit sharp.
4. Read your mistakes log twice.
5. Keep flashcards going, but cap new cards.
6. Final rehearsal five to seven days out, then light study only.
7. Logistics. Confirm your Pearson VUE booking, the centre route, your ID and the time you need to leave. The exam day guide has a checklist.
8. Sleep. The last two nights matter more than the last two chapters.

Next steps

• Generate your own week-by-week calendar with the study plan generator: enter your exam date and weekly hours.
• Read how to pass the CISSP for the method behind the plan.
• Set up daily review with the flashcards guide.