Security+
SY0-801 · From November 17, 2026
1General Security Concepts
16%
2Threats, Vulnerabilities and Attacks
24%
3Security Architecture
19%
4Security Operations
27%
5Security Program Management and Oversight
14%
Certification comparison
Security+ vs CISSP
They’re for different stages of a career. Security+ is the baseline for people starting in security. CISSP is for experienced professionals, and ISC2 requires years of paid security work before it certifies you.
Last updated
Side by side
The two exams at a glance
Every figure comes from the vendor’s own pages, through our exam guides, and is checked every week.
| CompTIA Security+ | ISC2 CISSP | |
|---|---|---|
| Vendor | CompTIA | ISC2 |
| Exam code | SY0-801, SY0-701 | CISSP |
| Level | Intermediate | AdvancedISC2 calls it Professional |
| Written for | Security analyst or engineer | Security analyst or engineer |
| Questions | Up to 90 | 100–150 |
| Time | 90 min | 3 hours |
| Passing score | 750 / 900 | 700 / 1000 |
| Exam cost | Varies by countryCompTIA shows the price for your country before you pay | $749Standard registration in the Americas; set by region |
| Experience | Network+ and 2 years in security administrationRecommended experience | 5 years in 2 or more of its 8 domainsExperience required |
| Renewal | Every 3 years: 50 CEUs | Every 3 years: 120 CPE credits |
| Exam outline | 5 domainsLargest: Security Operations (27%) | 8 domainsLargest: Security and Risk Management (16%) |
| What’s changing | SY0-801 launches on November 17, 2026. SY0-701 retires on June 11, 2027 | A new CISSP exam outline takes effect on April 15, 2027 |
Levels are our own rating, from the level each vendor gives its exam. How we check our facts
Exam domains
What each exam covers
Each domain’s share of the exam, as the vendor publishes it. Where one exam has two versions on sale, this is the newer one.
CISSP
Current outline · Until April 14, 2027
1Security and Risk Management
16%
2Asset Security
10%
3Security Architecture and Engineering
13%
4Communication and Network Security
13%
5Identity and Access Management
13%
6Security Assessment and Testing
12%
7Security Operations
13%
8Software Development Security
10%
Which one
Which should you take?
Choose Security+ if
you’re early in your security career, or you need a recognized baseline certification.
Choose CISSP if
you have years of security work behind you and are moving toward senior, architect or management roles.
Which one first?
Security+ first, by some years. You can sit the CISSP exam before you have the experience, but ISC2 then makes you an Associate of ISC2 until you’ve earned it.
Beyond the numbers
What really differs
Who it’s written for
Security+ tests working knowledge for hands-on roles. CISSP tests judgment across the whole field, from risk management to software security, from the point of view of someone who designs and manages a security program.
A recommendation against a requirement
CompTIA recommends experience for Security+ but doesn’t check it. ISC2 checks your work history for CISSP through an endorsement after you pass.
The exam itself
Security+ is a fixed set of questions with some performance-based ones. CISSP is adaptive: each question depends on your earlier answers, and the exam ends when it has enough evidence either way.
FAQs
Got Questions? We’ve Got Answers.
Find quick answers or contact our support team.
Should I take Security+ or CISSP first?
Security+ first, by some years. You can sit the CISSP exam before you have the experience, but ISC2 then makes you an Associate of ISC2 until you’ve earned it.
Which is harder, Security+ or CISSP?
CISSP. We rate CISSP advanced and Security+ intermediate, going by the level each vendor gives its exam and the experience it expects.
What experience do I need for Security+ and CISSP?
Security+: CompTIA recommends Network+ and 2 years in security administration. It isn’t required to sit the exam. CISSP: ISC2 requires 5 years in 2 or more of its 8 domains to certify. You can take the exam before you have it.
Which costs more, Security+ or CISSP?
Security+: Varies by country. CompTIA shows the price for your country before you pay. CISSP: $749 (standard registration in the Americas; set by region). Check ISC2’s site for the price in your country.
