59%

of security teams report critical or significant skills needs, up from 44% a year earlier. ISC2 Cybersecurity Workforce Study 2025.

ISC2 Certified Information Systems Security Professional (CISSP) certification

Security Teams Need Leaders Now.

Nearly six in ten security teams now report critical or significant skills gaps, up sharply in a year. CISSP proves you can lead security across all eight domains, from risk to software.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

ISC2 CISSP

Course

5 days

Course fee

RM9,500

Exam fee

Included

Next intake

30 Nov 2026

Version note: The CISSP exam gets a new outline on 15 Apr 2027, and exams run in March, June, September and December. Tell us when you plan to sit it, and we will make sure you train on the right outline.

Quick answer

What is CISSP?

The Certified Information Systems Security Professional (CISSP) is ISC2’s senior certification for security professionals who design, engineer and manage an organisation’s overall security posture. It covers eight domains, from security governance and risk management to software development security. The exam is adaptive, 100 to 150 items in three hours, and you need five years of experience to be certified.

Exam facts verified against isc2.org on 23 Oct 2026

FOR

Experienced security professionals heading into senior or leadership roles

ROLES

Security manager, security architect, security consultant, CISO

SKIP IF

You have under a year in security. Start with SSCP or ISC2 CC

01

The Credential

What you study, practise and sit to earn it.

Pass the CISSP exam, show five years of experience in two or more of the eight domains, and get endorsed. CISSP was the first information security credential to meet ANAB ISO/IEC 17024.

COURSE

5 days, 8 domains

FOCUS

Leading security across the organisation

EXAM

CAT, 100 to 150 items, 180 min

CREDENTIAL

ISC2 CISSP

Awarded by

ISC2

Level

Senior

Prerequisite

None to sit; 5 years’ experience to certify

No experience yet?

Pass and become an Associate of ISC2

Upkeep

120 CPE per 3 years, US$135 a year

Related

CCSP, AAISM, CISM

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Lead security across every domain

→

CISSP

ISC2’s senior, broad security credential

Manage the security programme

→

ISACA CISM

Governance, risk, programme and incident management

Stay hands-on as an architect or engineer

→

CompTIA SecurityX

Expert practitioner credential, performance-based

Go deep on cloud security

→

ISC2 CCSP

Vendor-neutral cloud security; CISSP covers its experience requirement

Five years' experience to certify. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with ISC2 SSCP.

03

What the Exam Covers

Eight domains from ISC2’s CISSP exam outline effective 15 Apr 2027. Bars to scale.

8 domains, 100 to 150 itemsLargest: Governance and Risk, and IAM, 13.6% each

Security Governance and Risk Management 14%
Identity and Access Management 14%
Security Architecture and Engineering 13%
Communication and Network Security 13%
Security Operations 13%
Asset Security 12%
Security Assessment and Testing 11%
Software Development Security 11%

Source: ISC2 CISSP Certification Exam Outline, effective 15 Apr 2027. Exams before that date follow the April 2024 outline, which weights Security and Risk Management at 16%.

04

What the Course Covers

Eight domains plus a final review, over five days.

Five days of instructor-led CISSP training. You work through all eight domains, with AI security built into each one, then pull it together in a final review before the exam.

Domains 1 to 2

Governance and Assets

  • Security governance, risk management and ethics
  • Legal, regulatory and supply chain risk
  • Asset and data classification, handling and life cycle

Domains 3 to 4

Architecture and Networks

  • Secure design principles and security models
  • Cryptography and cryptanalytic attacks
  • Secure network architecture, components and channels

Domains 5 to 6

Identity and Testing

  • Identification, authentication and federation
  • Authorisation models and access provisioning
  • Assessment, testing and audit strategies

Domains 7 to 8

Operations and Software

  • Investigations, logging and monitoring
  • Incident management, recovery and continuity
  • Security in the software development life cycle

Review

Putting It All Together

  • Cross-domain scenarios
  • Exam strategy for adaptive testing

8

domains covered end to end. ISC2 now builds AI security into every one, from AI governance to model security and AI-assisted coding.

05

Why Now

How skills gaps are growing, what they cost, and why train with us.

59%

of security teams report critical or significant skills needs, up from 44% a year earlier

ISC2 Cybersecurity Workforce Study 2025

55%

agree their organisation has the resources to handle security incidents over the next two to three years

ISC2 Cybersecurity Workforce Study 2025

26%

have seen oversights in security processes and procedures because of skills shortages

ISC2 Cybersecurity Workforce Study 2025

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Meeting it takes leaders who see security across the whole organisation.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

ISC2 Official Training Preferred Partner

Training aligned to the ISC2 CISSP exam outline

Exam included

One fee covers training and your exam

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Five-day courseIncluded

CISSP exam voucherIncluded

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM9,500

Dates

Where

Fee

Mon 30 Nov to Fri 4 Dec 2026

Kuala Lumpur or online

RM9,500 incl. exam

Mon 18 to Fri 22 Jan 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 29 Mar to Fri 2 Apr 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 12 to Fri 16 Apr 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 10 to Fri 14 May 2027

Kuala Lumpur or online

RM9,500 incl. exam

Mon 12 to Fri 16 Jul 2027

Kuala Lumpur or online

RM9,500 incl. exam

Exam windows: ISC2 runs CISSP exams 1 to 31 Mar, 1 to 30 Jun, 1 to 30 Sep and 1 to 31 Dec. Exams from 15 Apr 2027 follow the new outline. Your advisor helps you plan the right window.

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Certified Information Systems Security Professional (CISSP)

Format

Computerised Adaptive Testing (CAT)

Items

100 to 150, multiple choice and advanced item types

Duration

3 hours

Passing score

700 out of 1,000

Languages

English, Chinese, German, Japanese, Spanish

Exam windows

March, June, September, December

Exam fee

Included in the course fee

KEEP IT ACTIVE

Earn 120 CPE credits

Earn 120 continuing professional education credits over each three-year cycle, about 40 a year.

ANNUAL FEE

US$135 a year

ISC2 members pay one annual maintenance fee of US$135, however many ISC2 certifications they hold.

FAQ

Questions People Ask

What is CISSP?

The Certified Information Systems Security Professional (CISSP) is ISC2’s senior certification for security professionals who design, engineer and manage an organisation’s security posture across eight domains.

From 15 Apr 2027 the exam follows a new outline. Domain 1 becomes Security Governance and Risk Management, and the weights are rebalanced across all eight domains, with AI security built into each.

ISC2 runs CISSP exams in four windows: 1 to 31 Mar, 1 to 30 Jun, 1 to 30 Sep and 1 to 31 Dec. Our advisors help you choose an intake that lines up with a window and the right outline.

At Trainocate Malaysia the five-day CISSP course is RM9,500 per person, including the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

Five years of full-time experience in two or more of the eight domains. A relevant degree or an approved credential can cover one year. Without the experience you can pass and become an Associate of ISC2, with six years to earn it.

CISSP is broad, covering technical and managerial security across eight domains. CISM focuses on managing the security programme. Many security leaders hold both.

Earn 120 CPE credits every three years and pay the US$135 annual maintenance fee.

Lead Security Across the Board

Pick an intake. An advisor confirms fees, your exam window, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 30 Nov to 4 Dec 2026
  • RM9,500, exam included

Sources

  1. ISC2: CISSP certification
  2. ISC2: CISSP exam outline (current and 15 Apr 2027)
  3. ISC2: CISSP exam outline effective 15 Apr 2027 (PDF)
  4. ISC2: Member policies (CPE requirements)
  5. ISC2: Annual maintenance fees
  6. ISC2: 2025 Cybersecurity Workforce Study
  7. Trainocate: CISSP course page
  8. NACSA: Cyber Security Act 2024 (Act 854)
  9. MAICSA: Act 854 regulations summary