CISSP Results and Retakes

When results arrive

After you finish the CISSP CAT exam, Pearson VUE usually provides a provisional pass or fail result at the test center before you leave. ISC2 also sends an email with the result and the next step. In most cases, this official delivery follows shortly after the appointment; Pearson's delivery to ISC2 can take up to 72 business hours.

If you do not receive the follow-up email after several days, check that you can access the email account associated with your ISC2 exam record and look for messages from the testing provider. ISC2 identifies duplicate accounts or an inaccessible email address as possible causes of delay. Contact ISC2 Exam Administration if the result is still missing after the stated delivery window.

The result is pass or fail. A CISSP CAT report does not provide a numeric scaled score, raw percentage, or count of correct answers. Do not plan to reconstruct a score from the number of items or the time you spent in the exam. The report is designed to tell you the outcome and, if you fail, give domain-level preparation feedback.

What the pass or fail report includes

If you pass, the report confirms the exam outcome and points to the application process. Passing does not by itself grant the CISSP designation. You still need to satisfy the experience requirement or apply for Associate of ISC2 status if you are short, agree to the Code of Ethics, and complete the applicable application and payment steps.

If you fail after answering the minimum number of items, ISC2 provides a domain proficiency breakdown. It identifies relative levels such as below, near, or above proficiency for the domains assessed. This is diagnostic information, not a list of missed questions or a score per domain. Candidates who pass do not receive the same domain report.

Use the report to choose what to review. Compare the lowest areas with the current exam outline and identify the underlying task or distinction. For instance, repeated weakness in access topics might point to confusion between authentication and authorization, while an operations gap might involve incident sequence or evidence preservation. A domain label is a starting place, not a complete explanation of why you missed items.

CISSP retake waiting periods

ISC2's policy imposes test-free days between unsuccessful attempts. After the first attempt, you may retest after 30 test-free days. After the second attempt, you must wait 60 test-free days from that most recent exam. After the third and every later attempt, the wait is 90 test-free days.

You may take a particular ISC2 certification exam at most four times in a 12-month period. The limit and waiting periods are independent rules: meeting a waiting period does not increase the yearly attempt limit. Treat the date shown in Pearson VUE as the appointment date and ensure the required test-free period has passed before booking a retake.

These periods are minimums, not recommended study lengths. A candidate may be allowed to retest after the waiting time but still benefit from more preparation. Use the failed-domain diagnostic, review the concepts that caused errors, and schedule when you can explain the material on fresh scenarios. Do not take an attempt simply because the first eligible day arrived.

What a retake costs

Each separately purchased CISSP attempt normally requires a new exam purchase. ISC2 currently lists the US exam at US$749 before applicable tax. The exact amount may differ by region or package, and the live registration checkout controls the price. A training or exam bundle may include a second attempt benefit, but its use depends on the package's purchase region, expiration, eligibility, and other terms.

For a simple US illustration, two separately purchased attempts at the current listed price total US$1,498 before tax. If the candidate later passes and meets the experience requirement, the first US$135 member annual maintenance fee makes the exam-and-first-fee subtotal US$1,633. This excludes study materials, travel, time away from work, later annual maintenance, and CPE activity expenses.

A Peace of Mind Protection package may change the attempt cost if it covers a second exam within its conditions. Compare the package price and deadline with two standalone exam purchases. Do not assume every ISC2 training purchase includes this protection or that a second attempt is open-ended; follow the exact benefit terms and the standard waiting periods.

Plan a retake using the diagnostic

First, let the initial result settle and read the domain feedback carefully. Mark each domain as a priority based on the proficiency level and your own practice errors. For each weak task, write down the concept, the distinction that was missed, and the clue in the scenario that should guide the next decision.

Next, rebuild the area with authoritative references and deliberate practice. A low area in Security Assessment and Testing may call for separating an audit from a vulnerability scan or penetration test. An IAM gap may call for reworking identity life cycle, authorization, and least privilege. Continue to mix questions from stronger domains so the review plan remains balanced against the full outline.

Use new questions with complete explanations. Repeating the same set until answers are familiar can make the percentage rise without showing that the reasoning transfers. Keep an error log for misunderstood content, missed constraints, and answers chosen at the wrong stage. Review those errors after a delay and explain the correct decision without looking at the solution.

Before booking, check that the relevant waiting period has elapsed, your purchase or voucher remains valid, and the new appointment is available. Take the test when you are prepared to answer sequentially and maintain attention for the full possible duration. The CAT may stop after different item counts, so a retake plan should focus on knowledge and decision quality rather than a target question count.

Passed the exam: application timeline

A candidate who passes must submit the ISC2 certification application within nine months of the pass. Applicants who meet the five-year experience requirement across at least two CISSP domains complete the endorsement and application process. ISC2 may audit an application and request evidence, so keep work history and supporting records accurate.

If you passed but do not yet have the required experience, apply for Associate of ISC2 status within that same nine-month application window. CISSP associates have up to six years to gain the required experience and submit the certification application. Associate status is not CISSP, and the associate route has its own annual maintenance fee and continuing education requirements.

Do not wait until the last weeks of the nine-month period to assemble your application. Prepare a work chronology, identify a qualified endorser or choose ISC2's review route, and check the current application requirements. If the application deadline is missed, ISC2 states that the candidate must retake the examination to continue the certification process.

Worked retake timelines

A first failed attempt

A candidate takes the exam on Monday and receives a fail report. The earliest permissible retake follows 30 test-free days, according to the retake policy. That is only the earliest date the policy allows; it does not mean the candidate should book immediately. The candidate can use the domain feedback to identify weak outline tasks, practice unfamiliar scenarios, and choose an appointment after the work is complete.

A second unsuccessful attempt

A candidate retakes after the first waiting period and fails again. The next attempt must wait 60 test-free days from the second attempt. The candidate also remains within the maximum of four attempts in a 12-month period. The longer wait is an opportunity to change the preparation approach rather than repeat the same materials without addressing recurring errors.

An attempt after a pass

A candidate passes on the second attempt after paying for two standalone US exam purchases. At currently listed amounts, those attempts total US$1,498 before tax. If the candidate has the qualifying experience and receives application approval, add the first US$135 AMF for a subtotal of US$1,633. If the candidate lacks experience, use the associate path and its US$50 annual AMF instead while working toward the experience requirement.

Avoid reading the item count as a result

A shorter or longer CAT attempt does not reveal the outcome. ISC2 may reach a confident result at the minimum length, continue because it needs more information, or use the maximum-length or time-expiration rule. The candidate sees pass or fail, not the underlying ability estimate. After a fail, the domain diagnostic is useful; after a pass, the application instructions are the useful next action.

If the email result has not arrived

First, retain the printout or provisional result information from the test center and wait through ISC2's stated delivery window. Pearson's result delivery may take up to 72 business hours. Check the inbox and spam folder for the address attached to the exam booking. If the window passes without an email, contact ISC2 Exam Administration with your exam date and account details. A duplicate ISC2 account or an email address you cannot access can delay the confirmation.

Do not purchase a retake or schedule another exam while you are waiting for a result unless ISC2 has confirmed that you failed and you are eligible to register. The result controls whether the next step is an application or a retake. Keep the testing confirmation and support correspondence together until the record is resolved.

A practical retake calendar

On the result day, record the attempt number, the report, and the earliest test-free date. If the attempt failed, copy the domain proficiency levels into your review plan. During the first part of the wait, rebuild the concepts behind the lowest results. In the next part, use fresh scenario questions to test whether the corrected reasoning transfers beyond the questions you already remember.

Before the waiting period ends, compare your error log with the outline. Do not book solely because you have reached the minimum wait. Look for evidence that repeated mistakes have changed: you can identify the role, distinguish the relevant control, and explain why the best answer fits the scenario. The exam is still adaptive, so a practice result is not a guaranteed pass forecast.

Finally, check the attempt limit, voucher expiration, and current appointment availability. If you are relying on an included second attempt, confirm the package's terms and that the exam date fits its window. This makes the retake date part of a plan rather than an automatic response to the first open slot.

Separate exam spending from status maintenance

A candidate budgeting for a retake should distinguish the exam purchase from the costs that start after a pass. Two US attempts at the listed standalone price are US$1,498 before tax. The US$135 member AMF is paid after approval for the full credential; it is not a retake fee. A candidate who lacks experience may instead pay the US$50 associate AMF while gaining experience, then pay the applicable upgrade amount after approval.

CPE is an ongoing maintenance requirement, not an exam fee. CISSP members earn 120 credits over a three-year cycle; Associates earn 15 each year. Some learning activities have a price and others may not. Do not include a fixed CPE course cost in a retake budget unless you have chosen that course. Add travel, preparation resources, time away from work, and taxes as separate personal expenses.

An exam bundle can alter the exam line if it includes multiple attempts, but compare its expiration and allowed region with your likely timeline. A retake benefit does not remove the test-free period. A low price that expires before you may retest has little practical value.