What is the CISSP certification and who is it for?
The CISSP (Certified Information Systems Security Professional), awarded by ISC2, is one of the most recognised certifications in information security. It shows that a professional has a broad view of security: governance, risk management, architecture, networks, identity, operations and software development. It is not a tool certification but a judgement certification.
It targets experienced professionals: CISOs, security architects, consultants, auditors, security project managers and engineers moving into leadership roles. In Morocco, where Law 05-20 and DGSSI directives strengthen governance requirements, the CISSP is frequently mentioned in senior job postings.
In short, to earn the CISSP you must pass the exam, prove five years of relevant work experience, be endorsed by a certified member, then maintain the credential through continuing education.
What are the 8 CISSP domains?
The Common Body of Knowledge (CBK) is divided into eight domains with different exam weightings. All of them matter: the adaptive exam can test you on any of them.
- Security and Risk Management: governance, compliance, ethics, business continuity.
- Asset Security: classification, ownership, retention and data protection.
- Security Architecture and Engineering: security models, cryptography, physical security.
- Communication and Network Security: network architectures, secure channels.
- Identity and Access Management (IAM): authentication, authorisation, federation.
- Security Assessment and Testing: audits, penetration tests, log reviews.
- Security Operations: incident management, investigations, disaster recovery.
- Software Development Security: secure lifecycle, code and API security.
How does the CISSP exam work?
The English CISSP exam uses CAT (Computerized Adaptive Testing): difficulty adjusts to your answers as you go. It has 100 to 150 items, lasts up to 3 hours and is taken at a Pearson VUE test centre. The passing score is 700 out of 1000 (scaled score).
The adaptive format has two practical consequences: you cannot go back to a question once answered, and the exam may end at 100 items if the system has enough evidence. Ending early means neither a pass nor a fail. Questions favour a manager's reasoning: among several technically correct answers, choose the one that best serves the organisation, its risks and priorities.
Logistically, you register online with Pearson VUE, which has test centres in Morocco; check availability several weeks ahead, as slots can be limited. Bring a valid ID that exactly matches your registration name. If you fail, ISC2 imposes a waiting period before you can retake the exam, so it is better to sit it once your practice scores are consistent rather than trying your luck.
What experience requirements must you meet?
ISC2 requires five years of cumulative, paid, full-time work experience in at least two of the eight CBK domains. A recognised four-year degree (or regional equivalent) or a credential on ISC2's approved list can waive one year, but the two waivers cannot be combined.
You can sit the exam before meeting these requirements. If you pass, you become an Associate of ISC2 and have six years to gain the missing experience. This is a useful route for an engineer with a few years of experience who wants to get ahead.
After passing, there is the endorsement step: a certified ISC2 member vouches for your experience, within nine months of the exam. If you do not know anyone, ISC2 can act as the endorser.
How do you maintain the CISSP?
The CISSP is valid for three years and is renewed in three-year cycles. During each cycle you must earn 120 Continuing Professional Education (CPE) credits through training, conferences, webinars, publications or working groups. It is best to spread them across the three years rather than catch up at the end.
You must also pay an annual maintenance fee to ISC2, whose amount is published by ISC2 and may change. Both conditions apply: CPEs without the fee, or the reverse, are not enough to keep the credential.
How do you prepare for the CISSP in 8 to 12 weeks?
For a working professional, an 8 to 12-week plan at 8 to 12 hours a week is realistic. The goal is not memorisation but connecting the domains and adopting a leadership perspective.
- Weeks 1–2: a diagnostic practice test, then Domain 1 (risk and governance), which frames everything else.
- Weeks 3–6: one or two domains per week, prioritising those where your experience is weakest.
- Weeks 7–8: cross-domain review, summary notes and practice reading questions "the ISC2 way".
- Weeks 9–12: timed adaptive practice exams, review of every mistake, then book the exam once your scores are stable.
Why do Moroccan banks and CISOs value the CISSP?
Morocco's financial sector faces strong Bank Al-Maghrib requirements on risk management and information systems security, and critical infrastructure operators must apply the rules stemming from Law 05-20. These organisations need leaders who can talk to executive management, auditors and regulators, not just technical teams.
The CISSP addresses exactly this need: it demonstrates cross-domain mastery and verified experience. It is also well known to international groups and consulting firms in Morocco, which helps mobility. If you are torn between CISSP and the more governance-focused CISM, our dedicated comparison will help you decide.
Where can you prepare for the CISSP in Morocco?
GATech offers an intensive 5-day (40-hour) preparation covering all 8 CISSP domains, starting at 23,900 MAD with the exam voucher included. The course includes adaptive-style practice questions, case studies and a method for reading questions, in class in Casablanca or Rabat, or as a live virtual classroom. GATech is not an ISC2 Official Training Partner: this is independent preparation for the official exam.
Several offers are available: 10% off when you pay at least 4 weeks before the session, 15% for groups of 3 or more from the same company or for students and recent graduates, and 3 interest-free instalments for individuals. Discounts cannot be combined. Request a quote to see upcoming sessions.
Frequently asked questions
Can I take the CISSP without 5 years of experience?
Yes. You can sit the exam and, if you pass, become an Associate of ISC2. You then have six years to gain the required experience.
Is the CISSP exam available in French?
The adaptive CAT format is offered in English, so a good command of professional English is needed to pass.
What score do I need to pass the CISSP?
You need 700 out of 1000 (scaled score). The exam has 100 to 150 items and lasts up to 3 hours.
How many CPEs are needed to renew the CISSP?
You need 120 CPE credits per three-year cycle, in addition to paying the ISC2 annual maintenance fee.
How much does CISSP preparation cost in Morocco?
At GATech, the 5-day CISSP preparation starts at 23,900 MAD with the exam voucher included, and discounts may apply under our offer terms.
GATech teaching team
Cybersecurity trainers and consultants preparing professionals in Morocco for CEH, OSCP+, CISSP, CompTIA and ISO 27001.
Published
