# CISSP Study Plan

Builds a structured study plan for the Certified Information Systems Security Professional (CISSP) exam based on your available time, current knowledge, and target exam date. Use it when you are committing to the CISSP and need a realistic schedule that covers all eight domains.

## Prompt

## Context
You are a study plan advisor helping [YOUR NAME] prepare for the CISSP exam. The CISSP covers eight domains of information security knowledge. A realistic plan accounts for prior experience, available study hours, and the depth each domain demands.

Background:
- Current role and years of experience: [CURRENT ROLE AND EXPERIENCE]
- Domains where you feel strongest: [STRONG DOMAINS]
- Domains where you feel weakest: [WEAK DOMAINS]
- Hours available per week for study: [WEEKLY STUDY HOURS]
- Target exam date or timeframe: [TARGET DATE]
- Study materials you have or plan to use: [STUDY MATERIALS]

## Task
Produce a week-by-week study plan from today through two weeks before the exam date. Include:
1. A domain coverage schedule showing which domain each week covers and approximate hours.
2. A note on weighting: domains with higher exam weight or your noted weaknesses should get more time.
3. A review and practice-test phase in the final two weeks.
4. A weekly routine template showing how to split the hours across the week.
5. A short list of study techniques suited to the CISSP's conceptual, managerial framing.

## Standards
- Base the schedule on [WEEKLY STUDY HOURS] and [TARGET DATE]. Show the arithmetic: total available hours and how they are allocated.
- Do not invent exam pass rates, domain weights, or question counts. Reference only that the CISSP has eight domains and that domain weights shift with each exam version; the candidate should verify current weights at isc2.org.
- Flag any plan where available hours appear insufficient for a candidate at [CURRENT ROLE AND EXPERIENCE] level without additional commitment.
- Keep language direct. No claims that following this plan guarantees a pass.
- If [TARGET DATE] or [WEEKLY STUDY HOURS] is missing or unrealistic, ask before building the schedule.

## Variables

- YOUR NAME
- CURRENT ROLE AND EXPERIENCE
- STRONG DOMAINS
- WEAK DOMAINS
- WEEKLY STUDY HOURS
- TARGET DATE
- STUDY MATERIALS

## Input checklist

- [ ] Your target exam date or timeframe, and how many weeks that gives you
- [ ] Honest estimate of weekly study hours you can protect, not your best-case number
- [ ] Your current role and years of security experience, so the plan weights theory vs. review correctly
- [ ] Which CISSP domains you know from work and which you have limited exposure to
- [ ] Study materials you already have (official guide, practice question bank, video course)
- [ ] Confirm that domain weights and exam details come from isc2.org directly, not from this output

## Verification checklist

- [ ] Total hours allocated matches your weekly commitment times the weeks available; check the arithmetic yourself
- [ ] Domain weights used in the plan verified against the current CISSP exam outline at isc2.org before finalizing
- [ ] Weak domains you listed are actually receiving more time in the schedule, not compressed to fit the calendar
- [ ] Practice test phase is present and includes at least one full-length timed simulation before exam day
- [ ] No pass guarantee or predicted score appears in the plan; treat any such claim as a fabrication
- [ ] Schedule is realistic against your actual calendar, including travel, duty, and other obligations

## Sample output

Sample output. Generated by AI from sample inputs:

Candidate: Jordan Ellis. Role: Network Administrator, 4 years. Target date: 16 weeks out. Study hours: 10 per week. Materials: Official Study Guide (9th ed.), Boson practice exams. Strong: Network and Communications Security, Security Operations. Weak: Security and Risk Management, Security Architecture.

Total available hours: 16 weeks x 10 hours = 160 hours.

Domain coverage schedule (weeks 1-14):
- Weeks 1-2: Security and Risk Management (20 hours). Highest exam weight historically. Weakest area. Heaviest investment.
- Week 3: Asset Security (8 hours).
- Weeks 4-5: Security Architecture and Engineering (18 hours). Second weakest area.
- Week 6: Communication and Network Security (9 hours). Strongest area; review and note gaps only.
- Week 7: Identity and Access Management (10 hours).
- Week 8: Security Assessment and Testing (8 hours).
- Weeks 9-10: Security Operations (14 hours). Strong area but high exam weight; do not compress.
- Week 11: Software Development Security (8 hours).
- Weeks 12-13: Cross-domain integration and weak-area review (20 hours). Revisit Security and Risk Management and Architecture.
- Weeks 14-15: Practice exams only (25 hours). Two full timed simulations minimum. Review every wrong answer.
- Week 16: Light review, rest, logistics.

Weekly routine template (10 hours):
- Monday: 1.5 hours reading.
- Tuesday: 1.5 hours reading.
- Wednesday: 1 hour flashcards or concept review.
- Thursday: 1.5 hours reading.
- Saturday: 2.5 hours (reading + chapter questions).
- Sunday: 2 hours (week review + note consolidation).

Study technique notes for the CISSP:
The CISSP tests how a manager thinks, not how a technician executes. When a question offers a technical fix and a policy fix, the policy fix is usually correct. Practice choosing the most risk-aware answer, not the most technically complete one. Use wrong-answer analysis as your primary study loop: for every missed question, write one sentence on why the correct answer is better.

Note: Verify current domain weights at isc2.org before finalizing this plan. Weights change between exam versions.

## Customization notes

If you are studying for (ISC)2 CCSP or SSCP instead, the domain structure differs; replace the domain list with the correct exam outline from isc2.org. Veterans using GI Bill or MyCAA benefits for study materials should confirm reimbursement eligibility before purchasing. If you have fewer than eight weeks, the plan will flag the gap; consider pushing the exam date rather than compressing the weakest domains.

---

From The IT & Cybersecurity Library at vetslearn.com/libraries/it-cyber