How to Start Preparing for CISSP? What Resources Are to be Used for CISSP Preparation?

In the course of my professional journey, I’ve encountered numerous individuals aspiring to attain the coveted CISSP (Certified Information Systems Security Professional) certification. Given the plethora of resources available and diverse recommendations from various sources, many find themselves grappling with the challenge of where to start their preparation. Today, I aim to assist those beginning on the formidable journey towards CISSP certification by offering guidance on how to initiate their preparation and outlining key resources essential for a comprehensive and effective study plan. This post aims to streamline the process for individuals seeking to navigate the complexities of CISSP certification, providing a roadmap on how to start preparing for CISSP and what resources to use for CISSP preparation.

Please make sure to go through my previous article to get an overview and my exam experience on the certification.

Assess and Understand Your Current Status

Gaining insight into your knowledge of the cybersecurity field is essential for efficiently structuring your overall preparation. To initiate this assessment, consider asking a series of questions to yourself. This self-inquiry can provide a clearer understanding of your current grasp on cybersecurity concepts, allowing you to tailor your study plan to address specific areas of improvement and focus on enhancing your overall proficiency in the field.

How Familiar Are You With the 8 Domains of CISSP?

Take a look at all the domains and the contents within them, you can get the exam outline here. Various domains vary in size, with some being substantial and others more modest. Practical experience within these domains undoubtedly provides a significant advantage. As a result, one can strategically allocate time and attention to specific chapters or topics based on their familiarity and expertise within these domains.

How Many Hours a Day Can You Dedicate to Your Preparation?

Before you begin preparing, think about whether you’re ready to commit for a few months. Are you willing to give up some entertainment time to study? How much time you can set aside depends on your personal duties. There’s no universal timetable that works for everyone. If you have a basic understanding, studying for about 2 hours a day for 3 or 4 months could be sufficient, but it also depends on your current knowledge level.

Do You Have a Preferred Way of Learning: Through Books, Videos, or Live Classes?

Certainly, for CISSP, beginning with one of the main books is a must, and these books are known to be extensive. Begin reading at a steady pace; undoubtedly, many of us may find it challenging to initiate reading. Consider which approach will enhance your understanding of the concepts—whether it’s through an audiobook, videos, or participating in live classroom training. Acquire a grasp of all the concepts first, and then revisit the book; this approach is bound to boost your efficiency.

The Book ‘Official Study Guide (OSG)’ vs ‘Common Body of Knowledge (CBK)’

Out of the extensive array of resources available, only a select few books are officially authorized by ISC2 for CISSP preparation, and these two books stand out as the primary ones. You can locate these recommended resources here.

When it comes to the official study guide, it’s a hefty 1200+ page book delving into every topic in great detail. This might be overwhelming for beginners as it’s quite lengthy, and the content isn’t organized by domains but rather individual topics. The book comprises 21 chapters, and all 8 domains are spread across them. For instance, Domain 1, Security and Risk Management, spans chapters 1-4 and 19. It’s crucial to navigate through each chapter meticulously, aligning with the syllabus, to ensure no topics are overlooked. You can purchase this book on amazon.

The Common Body of Knowledge book is domain-based and spans 600 pages; however, it might pose a challenge for beginners. The content briefly covers numerous topics, which can be confusing due to the lack of in-depth explanations on many subjects. You can buy this book on Amazon. 

When comparing the two resources, my recommendation leans towards the (ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide, particularly for individuals lacking extensive expertise or seeking in-depth insights into the topics. This guide not only covers the material comprehensively but also provides practical examples, facilitating better retention of concepts. Additionally, the inclusion of 20 questions at the end of each chapter serves as a valuable tool to gauge and reinforce understanding.