How many items are on the current CISSP CAT exam?

ISC2 currently lists the CISSP CAT exam at 100–150 items with a three-hour maximum exam time. Zeph Tech keeps current exam mechanics in its certification registry and treats ISC2 as the final source of truth.

What experience do I need for CISSP?

ISC2 currently requires five years of cumulative full-time experience in two or more of the eight CISSP domains. A qualifying post-secondary degree or approved credential may satisfy up to one year, and candidates without the required experience may qualify for Associate of ISC2 status after passing the exam.

How is the CISSP different from CISM?

CISSP (ISC2) is broader in technical and management coverage across 8 domains. CISM (ISACA) is more narrowly focused on security management, governance, and risk — it is often preferred by CISOs and security programme managers. Both are globally recognised. Many senior practitioners hold both.

How does CCSP differ from CISSP?

The credentials cover different scopes. CISSP spans eight broad information-security domains, while CCSP focuses on six cloud-security domains. ISC2's CCSP outline effective August 1, 2026 lists a three-hour CAT exam with 100–150 items.

Reviewed tracks onlyIndependent study resource

ISC2 certification prep

Use a current reviewed learning path instead of mixing old exam logistics with newer objectives. Zeph Tech releases each ISC2 track only after its current owner-published outline and exam facts are moved into the certification registry.

Start current CC prep Open CISSP prep Open CCSP prep

Reviewed and available now

Certified in Cybersecurity (CC) — September 2026 outline.

ISC2 substantially revised the entry-level CC outline effective September 1, 2026. The Zeph Tech CC track uses a registry-backed current record and independently authored study material instead of carrying forward the older domain map.

Current

ISC2 Certified in Cybersecurity (CC)

Entry-level security principles, governance, identity and access management, networking and cloud security, and security operations with incident-response reasoning.

Open CC study guide Practice test Cram sheet

Current

ISC2 CISSP

Advanced security leadership and engineering across risk, assets, architecture, networks, IAM, assessment, operations, and software security, with current CAT facts and original practice.

Open CISSP study guide Practice test Cram sheet

Current · Aug 2026

ISC2 CCSP

Advanced cloud-security architecture, data, platform, application, operations, and legal/risk preparation aligned to the August 2026 six-domain outline.

Open CCSP study guide Practice test Cram sheet

Why start here

A clean foundational cybersecurity path

The CC track is useful for learners who want a vendor-neutral entry point before deeper administration, cloud-security, architecture, governance, or management certifications. It also gives Zeph Tech a current foundation that can link naturally into Security+, Network+, IAM, incident response, cloud, and governance guides.

Review gate

Remaining ISC2 credentials are not promoted as current until recertified.

CC, CISSP, and CCSP have passed the source-review gate. Older repository material for SSCP, CSSLP, and CGRC may contain useful concepts, but exam duration, item counts, domain weights, terminology, or owner guidance can change.

SSCP

Security-administration material remains behind review until the current outline, exam format, domain weighting, experience requirements, and official sources are captured in the maintained registry.

CSSLP and CGRC

Secure-software and governance/risk material will be released only after their owner-published exam facts are reviewed and separated from durable technical prose.

Editorial standard

One current record, then durable learning content.

Certification pages are easy to make stale because exam codes, timing, item policy, domain weighting, branding, and retirement dates can change while the underlying security principles remain useful. Zeph Tech separates those two categories. Volatile exam facts live in a maintained registry with review dates and owner links. Study prose focuses on transferable concepts, labs, troubleshooting, and decision patterns.

Practice questions are independently authored. Zeph Tech does not publish recalled live questions, exam dumps, leaked items, or copied commercial test-bank material. A practice score is treated as a diagnostic signal rather than a guarantee of exam performance.

This hub remains ad-free because its purpose is navigation. Advertising is reserved for individually reviewed substantive reading surfaces such as the current study guide, practice-test landing page, and printable review page after each clears the same quality and policy gates used elsewhere on the site.

Editorial standards All reviewed certification prep