How Long Do CISSP Results Take in 2026?
You get a provisional CISSP pass or fail at the Pearson VUE center; ISC2 emails the official result, which can take up to 72 business hours to arrive.
You find out whether you passed the CISSP before you leave the building. The Pearson VUE proctor hands you an unofficial, provisional result when you check out of the test center. The official result comes later by email from ISC2, and ISC2's FAQ says result delivery from Pearson "can take up to 72 business hours to arrive." There is no numeric score in either one: ISC2 does not release CISSP scores, only pass or fail, plus a domain breakdown if you did not pass.
CISSP result timing in 2026
CISSP runs year-round at Pearson VUE centers, so there is no release calendar to wait for. Each result moves through the same sequence.
| Stage | When | What you get |
|---|---|---|
| Check-out at the test center | Same day | Provisional pass or fail from the proctor; failing candidates also get domain proficiency levels |
| Official result email from ISC2 | Up to 72 business hours for Pearson to deliver results to ISC2 | Confirmation of the result and directions for next steps |
| Psychometric and forensic review | Can happen after the official result | Usually nothing; ISC2 notifies you only if it changes your result |
| Endorsement application (if you passed) | Within nine months of your exam date | Submitted at isc2.org/endorsement |
Source: ISC2 Frequently Asked Questions, After Your Exam, and Endorsement pages, checked October 22, 2026.
ISC2 also warns that results are not always real time. Its psychometric analysis needs a minimum number of test takers, and "depending on the volume of test takers for a given test, there may be times when results are delayed for approximately six to eight weeks." If your check-out printout said you passed, a quiet inbox for a day or two is normal.
How to check your CISSP result
- Read the printout at check-out. The proctor gives you the provisional result before you leave. Keep the paper, especially if you failed, because the domain proficiency list is printed there.
- Watch for the ISC2 email. ISC2 sends an email confirmation once it receives the results from Pearson. Look in spam and in whatever inbox is tied to your ISC2 account.
- Give it 72 business hours before chasing. That is ISC2's stated window for Pearson's result delivery. After that, contact ISC2. Results are not released over the phone.
- If you passed, start the endorsement application at isc2.org/endorsement. ISC2 says applications "cannot be submitted until notification of successfully passing an exam is received," so the email is your starting gun.
What your score report shows
Less than most candidates expect. ISC2's answer to "Will I receive an exam score?" is "No, scores are not provided." The exam outline lists the passing standard as 700 out of 1000 points, but you will not see where you landed on that scale.
The CISSP is a computerized adaptive test (CAT) in every language. You get 100 to 150 items and up to three hours. Twenty-five of those items are unscored pretest questions you cannot identify. The test can stop at 100 items once ISC2 is 95% confident your ability is above or below the pass point, so a short exam tells you nothing either way. If time runs out before you have answered 75 scored and 25 pretest items, the exam is an automatic fail.
If you pass, you get the pass result and nothing more. There is no domain breakdown for passing candidates.
If you fail, you get a proficiency level for each of the eight domains at the test center. ISC2 uses three levels: below proficiency, near proficiency, and above proficiency. Failing candidates who reached the minimum number of items also get diagnostic feedback on the domains where they struggled. Read that list against the current domain weights:
| Domain | Weight |
|---|---|
| 1. Security and Risk Management | 16% |
| 2. Asset Security | 10% |
| 3. Security Architecture and Engineering | 13% |
| 4. Communication and Network Security | 13% |
| 5. Identity and Access Management (IAM) | 13% |
| 6. Security Assessment and Testing | 12% |
| 7. Security Operations | 13% |
| 8. Software Development Security | 10% |
Security and Risk Management carries 16% of the exam and Asset Security 10%, so a weak mark in the heavier domain is the better place to start.
Retake rules if you did not pass
ISC2 applies two rules at once: a waiting period after each attempt and a cap per 12 months.
- After your first attempt: you may retest after 30 test-free days.
- After your second attempt: you may retest after 60 test-free days from your most recent attempt.
- After your third and later attempts: you may retest after 90 test-free days from your most recent attempt.
- Annual cap: up to 4 attempts within a 12-month period for each certification program.
- Fees: you pay the full exam fee for each attempt. The standard CISSP registration is U.S. $749 in the Americas, Asia Pacific, the Middle East, and Africa, EUR 719.04 in EMEA, and GBP 606.69 in the UK. Rescheduling costs U.S. $50 and cancelling costs U.S. $100.
- Peace of Mind Protection: if you bought your CISSP voucher with Peace of Mind Protection, it includes a second attempt. Both sittings must happen within 180 days of purchase, and the waiting period still applies.
One date matters if your retake drifts into next year. The current outline has been in effect since April 15, 2024, and ISC2 says that "effective April 15, 2027, the CISSP exam will be based on a new exam outline." A retake booked on or after that date is written to the new outline, so compare the two before you reuse old material.
After passing: endorsement within nine months
Passing the exam does not make you a CISSP yet. ISC2 requires five years of cumulative, full-time work experience in at least two of the eight domains. A qualifying degree or an approved credential can waive one year, but only one waiver counts. ISC2 revised the list of approved credentials on April 1, 2026, so check the current list rather than an old forum thread.
You then complete the certification application, which another ISC2 certified professional in good standing endorses and digitally signs. If you do not know one, ISC2 can endorse you, with proof of employment. ISC2's rule is that candidates "must complete the Certification Application process within nine months of their exam date." After approval you commit to the ISC2 Code of Ethics and pay your first Annual Maintenance Fee.
If you passed without the full experience, you can become an Associate of ISC2 and have up to six years to complete it.
Studying for a retake from your own notes
The domain list on your printout is the best study guide you will get, so aim the retake at it instead of rereading every chapter from the start.
- Upload what you already have: your notes, the official study guide chapters you own, your practice-question error log, or internal security policies you work with.
- Build a practice exam from those files with the practice test generator, limited to the domains marked below or near proficiency. CISSP questions reward judgment over recall, so ask for scenario questions.
- Turn your weakest domain into a narrated explainer with AI video lectures.
AI exam prep covers the rest of the workflow, and the best AI tools for certification exam prep roundup compares other options. A free Scholarly account includes one AI creation, enough to test this on one of your own domains. Paid plans cover more.
FAQ
How long does it take to get CISSP results?
You get a provisional pass or fail at the test center the same day. The official email from ISC2 follows once Pearson delivers the result, which ISC2 says can take up to 72 business hours.
Does ISC2 tell you your CISSP score?
No. ISC2 does not release scores. The passing standard is 700 out of 1000, but candidates only see pass or fail.
What do you get if you fail the CISSP?
A proficiency level (below, near, or above proficiency) for each of the eight domains, printed at the test center. Candidates who reached the minimum number of items also get diagnostic feedback on the domains where they struggled.
How soon can I retake the CISSP?
After 30 test-free days following your first attempt, 60 after your second, and 90 after your third and any later attempt. You can sit the exam at most 4 times in 12 months.
How long do I have to get endorsed after passing?
Nine months from your exam date to complete the certification application, including endorsement.
Sources
- ISC2, What To Do After Your ISC2 Certification Exam: https://www.isc2.org/exams/after-your-exam
- ISC2, Frequently Asked Questions: https://www.isc2.org/frequently-asked-questions
- ISC2, CISSP Certification Exam Outline: https://www.isc2.org/certifications/cissp/cissp-certification-exam-outline
- ISC2, CISSP Certified Information Systems Security Professional: https://www.isc2.org/certifications/cissp
- ISC2, Computerized Adaptive Testing: https://www.isc2.org/certifications/computerized-adaptive-testing
- ISC2, Endorsement: https://www.isc2.org/endorsement
- ISC2, ISC2 Exam Costs and Certification Pricing: https://www.isc2.org/register-for-exam/isc2-exam-pricing
- ISC2, Exam Peace of Mind Protection: https://www.isc2.org/landing/exam-peace-of-mind
- ISC2, CISSP Experience Waiver Updates (May 2026): https://www.isc2.org/Insights/2026/05/CISSP-Experiene-Waiver-Updates
Last verified: October 22, 2026. ISC2 updates its retake, pricing, and endorsement policies from time to time, so confirm on the official pages above before booking a retake or planning around a deadline.
