CISSP study plan (8 to 12 weeks)
Studying for the CISSP with no plan means drowning in 8 domains. Here is a structured 8-to-12-week schedule, built on the PDCA method (Plan-Do-Check-Act), to cover the whole CBK, measure your progress and aim for 700/1000.
The principle: one domain per week, in a PDCA loop
Each week follows the same cycle, drawn straight from Domain 1 and ISO 27001:
- Plan — set a measurable goal ("reach 8/10 on the domain quiz").
- Do — read the domain course, learn the mnemonics and the exam pitfalls.
- Check — take the quiz. Your best score sets your completion rate, tracked on the progress page.
- Act — identify your weak spots and schedule a short, targeted review.
The week-by-week schedule
| Week | Domain to study | Course |
|---|---|---|
| W1 | Domain 1 — Security & Risk Management (16%) | D1 course |
| W2 | Domain 2 — Asset Security (10%) | D2 course |
| W3 | Domain 3 — Architecture & Engineering (13%) | D3 course |
| W4 | Domain 4 — Communication & Network Security (13%) | D4 course |
| W5 | Domain 5 — Identity & Access Management (13%) | D5 course |
| W6 | Domain 6 — Security Assessment & Testing (12%) | D6 course |
| W7 | Domain 7 — Security Operations (13%) | D7 course |
| W8 | Domain 8 — Software Development Security (10%) | D8 course |
| W9-W10 | Consolidation: revisit your weakest domains + re-read the memo sheets | Overview |
| W11-W12 | Timed mock exams, time and stress management, final review | Quizzes |
Adapt the pace to your situation
Experienced profile (CISO, architect): 8 weeks is often enough, speeding through your work domains. Career-changer: spread over 10 to 12 weeks and double the time on domains 3, 4 and 8, the most technical.
Aim for 1 to 2 hours a day on weekdays, plus a longer weekend session for quizzes. Consistency beats intensity: 1 hour every day beats 7 hours on Sunday.
The 3 rules of revision that works
- Test before you feel ready: the quiz reveals real gaps and dispels the illusion of mastery.
- Space your recalls: revisit a domain a week later (spaced repetition).
- Think like a manager: on each question, pick the risk-management answer, not the purely technical one.
Frequently asked questions
How long does it take to study for the CISSP?
Usually 2 to 4 months (8 to 12 weeks): one domain per week, plus consolidation and mock-exam weeks.
How many hours per day?
1 to 2 hours on weekdays, a longer weekend session. Consistency comes first.
See also: how to pass the CISSP and the exam explained.