I’m preparing for the ISC2 CISSP and documenting it in public: what I study each week, what I get wrong in practice questions, and what finally made each domain click.
05 / cissp — study log
CISSP progress, domain by domain
Weightings follow the ISC2 exam outline. Each status updates as I finish a domain; every domain gets its own write-up.
01
Security and Risk Management
16%
○ Queued
02
Asset Security
10%
○ Queued
03
Security Architecture and Engineering
13%
○ Queued
04
Communication and Network Security
13%
○ Queued
05
Identity and Access Management (IAM)
13%
○ Queued
06
Security Assessment and Testing
12%
○ Queued
07
Security Operations
13%
○ Queued
08
Software Development Security
10%
○ Queued
The plan
- One domain at a time: read it, write it up here, then drill practice questions until scores are consistently strong
- Every wrong answer logged by domain, so weak areas get revisited
- Final weeks: full-length timed practice exams and a review of every wrong answer
Resources
- The official ISC2 CISSP exam outline (the source for domains and weightings)
- Study guides, question banks and courses get reviewed here as I use them
Think like a manager, not a technician: the best answer reduces risk to the organisation, follows policy and involves the right stakeholders.
All study posts live in the CISSP Journey category.
