Failed CISSP? Here's Your Recovery Plan

Pro tip: Failing candidates receive per-domain proficiency levels at the test centre, and that report is the only diagnostic ISC2 gives, so keep it. Rescheduling costs US$50, GBP 35 or EUR 40 and cancelling costs US$100, GBP 70 or EUR 80. ISC2 also reserves the right to withhold or cancel results where it suspects irregularity, fraud or policy violation, and applies psychometric and forensic evaluation to results after release.

• Preparing against a 4-hour, 125 to 175 item exam
  That was an older CISSP CAT specification. ISC2 currently publishes 3 hours and 100 to 150 items, including 25 unscored pretest items. Practising to the wrong length trains the wrong pace.
• Expecting a numerical score
  ISC2 states that candidates receive no numerical scaled score. The result is pass or fail, and only failing candidates receive per-domain proficiency levels. Chasing a target percentage in practice tests measures something the real exam never reports.
• Panicking when the exam feels hard at item 90
  ISC2 states the algorithm targets items you have about a 50 percent chance of answering correctly, so every candidate answers about half of what they see incorrectly. Difficulty is the design, not a signal about your result.
• Assuming a 100-item finish means failure
  ISC2 says the opposite is equally possible: an exam ending at the 100-item minimum means the algorithm reached 95 percent confidence quickly, in either direction. Exam length carries no information you can act on.
• Answering as the engineer who would fix the problem
  CISSP items usually ask what should happen first or what is most effective at the programme level. The correct answer is often to assess risk, obtain management approval, or check the policy, before anyone touches a system.
• Skipping Software Development Security because you are not a developer
  It is 10 percent of a compensatory exam, which is the same weight as Asset Security. ISC2 asks you to compare SAST and DAST, place security activities inside a lifecycle, and assess acquired software, none of which requires writing code.
• Leaving the endorsement to later
  ISC2 gives you nine months from the exam date to complete the certification application, and it must be endorsed and digitally signed by an ISC2 certified professional. Identify your endorser before you sit, or ask ISC2 to act as endorser.
• Treating breaks as free time
  ISC2 does not limit the number or duration of breaks, but every minute counts inside the three-hour maximum administration time. A ten-minute break costs ten minutes of exam.
• Booking a Chinese-language sitting without checking the window
  ISC2 offers the Chinese-language CISSP only during four annual windows: 1 to 31 March, 1 to 30 June, 1 to 30 September and 1 to 31 December. Outside those, the sitting does not exist.
• Planning to skip an item and return to it
  Item review is disabled on CAT. ISC2 states that once an answer is finalised, it cannot be reviewed or changed, because the next item is chosen from your response. Every answer is a commitment.

• Think like a manager, not a technician
• Study all 8 domains comprehensively
• Use official ISC2 study guide
• Practice with Boson or CCCure questions
• Focus on risk management mindset
• 3-6 months preparation recommended