How to Prepare for CISSP Exam 2023 in 6 Months?

The Certified Information Systems Security Professional (CISSP) credential is one of the most valued certifications in the IT security world. Securing this certification requires dedication, discipline, and a smart study plan. This article aims to guide you on how to create an effective 6-month study plan to conquer the CISSP exam.

Before diving into the study plan, it’s crucial to note that the CISSP exam covers a wide range of topics distributed across eight domains. The strategic plan for studying should account for the breadth and depth of these topics and the time required to master each.

CISSP Exam 6 Months Preparation Strategy

Month	Domain
1	Security and Risk Management
2	Asset Security, Security Architecture and Engineering
3	Communication and Network Security, Identity and Access Management
4	Security Assessment and Testing, Security Operations
5	Software Development Security, Review weak areas
6	Comprehensive Review, Practice Tests, Exam Simulation

Month 1 – Security and Risk Management

Dedicate the first month to studying the Security and Risk Management domain. It is the most extensive domain in terms of the content, so starting with it makes sense. Read this domain from the official (ISC)² CISSP study guide and complement it with online lectures from resources like Cybrary or LinkedIn Learning. Make sure to understand concepts like CIA triad, risk assessment, and security governance thoroughly.

Month 2 – Asset Security, Security Architecture, and Engineering

In the second month, focus on Asset Security and the first half of Security Architecture and Engineering. These domains involve understanding principles of data security, privacy, and architectural designs of secure systems. Try to conceptualize the knowledge by drawing diagrams or flowcharts.

Month 3 – Communication and Network Security, Identity and Access Management

In the third month, cover the Communication and Network Security and Identity and Access Management domains. Gain an understanding of network structures, secure network components, and access management mechanisms. Try to understand network protocols and diagrams, and get a grasp of IAM best practices.

Month 4 – Security Assessment and Testing, Security Operations

The fourth month should be focused on the Security Assessment and Testing and Security Operations domains. Understand various assessment and testing strategies and operational functionalities of security, including incident management and disaster recovery planning.

Month 5 – Software Development Security, Review weak areas

In the fifth month, concentrate on the Software Development Security domain. Learn about the secure software development lifecycle and controls. After completing this domain, use the rest of the month to review the domains you feel weak in. Everyone has different strengths and weaknesses, so your weak areas may differ from someone else’s. Use practice tests to identify these areas and review them extensively.

Month 6 – Comprehensive Review, Practice Tests, Exam Simulation

The final month should be focused on comprehensive review and practice. Go through all domains again, summarizing key points. Practice as many CISSP questions as you can get your hands on, and don’t forget to simulate the exam conditions. It’s essential to get a feel for the pressure and understand how to manage your time effectively.

Studying for the CISSP exam is a marathon, not a sprint. Pace yourself and don’t rush. Remember to take breaks and maintain a balance between studying and relaxation to avoid burnout. Follow this plan diligently, and you’ll be well-prepared to tackle the CISSP exam at the end of six months.

Subject Weightage in CISSP Exam 2023

The CISSP exam covers a broad range of topics distributed across eight domains, each of which carries a specific weightage. The weightage for each domain in the CISSP exam is as follows, represented in a table:

Domain	Weightage
Security and Risk Management	15%
Asset Security	10%
Security Architecture and Engineering	13%
Communication and Network Security	14%
Identity and Access Management	13%
Security Assessment and Testing	12%
Security Operations	13%
Software Development Security	10%

1. Security and Risk Management (15%): This domain covers a wide range of topics, including compliance laws and regulations, professional ethics, security policies and procedures, risk management concepts, threat modeling, and business continuity requirements.
2. Asset Security (10%): This domain involves identifying and classifying information and assets, determining and maintaining ownership, privacy protection requirements, and appropriate retention periods, and ensuring secure asset disposal.
3. Security Architecture and Engineering (13%): This domain addresses the design of security models, capabilities of security architectures, cryptography, and the security of system components and architecture.
4. Communication and Network Security (14%): Topics under this domain include secure design principles for network architecture, securing network components, and communication and network attacks.
5. Identity and Access Management (13%): This domain deals with controlling access and managing identity, from access management technologies to identity and access provisioning lifecycle.
6. Security Assessment and Testing (12%): This domain covers topics like designing and validating assessment and test strategies, security process data, and security control testing.
7. Security Operations (13%): Topics in this domain include understanding and supporting investigations, requirements for investigation types, logging and monitoring activities, securing the provisioning of resources, and understanding and applying foundational security operations concepts.
8. Software Development Security (10%): This domain involves understanding, applying, and enforcing software security, the effectiveness of software security, and security in the software development lifecycle.