I don't have the nerve to book the exam as it is expensive, any suggestions as to how to get over it?
You could get your employer to pay for the exam or reimburse you for your expense if you pass.
By booking the exam and telling others that you have booked it, you create a social obligation to get on with the studying towards passing it. Generally the trick is just to start the study and make it a regular habit, so that you can monitor your progress as your planned exam date approaches and improve those areas you score less well on.
You should ask yourself some questions:
1. How long have you worked in the field of cybersecurity?
2. How much material have you used to study for the exam?
3. How much time have you dedicated to the study of this material?
In my case, I purchased the CBK in April and passed the test in March. I bought other guides after that, but this is my window of study.
I became reasonably confident that I would pass the test by November, but I waited until January to book the exam.
I would suggest doing the CC while it is no cost for most. That is the general knowledge that need for a CISSP (no analytical questions). I think that reduces a lot of the stress of taking the CISSP since gives familiarity with ISC2 testing. Also small victories are good. The SSCP only requires a year of experience and only costs $249 (similar material to Security+ which costs $404). These 2 create a good path for the CISSP. You did not say what your experience is. You would need to go through the exam objectives and make notes to make sure that you have the minimum of 5 years in at least 2 domains if have not. $749 is a lot of money but is still less expensive than some other certifications that will not take you nearly as far if you advocate for yourself well. Every once in a while you may see something like ISC2 gave away some vouchers for their anniversary or a higher price in case fail the first time that the second one is worked into that price. I paid for mine, but my employer reimbursed me when I passed. I have a lot of experience but was a tough exam. I am not a fan of adaptive testing apparently. Best wishes.
These 2 create a good path for the CISSP
For all of the negativity which seems to unnecessarily follow the CC certification, I firmly agree with @nkeaton on this good advice.
But if your employer requires you to pass CISSP, then you are responsible to comply with their HR firewall. I would naturally assume you would not have taken such a role without meeting your company's criteria.
I bought the CBK, All in One and Dummies Guide and then sat down to read them 7 days before the exam. Every chapter of each book was precis'd and compared to the other sources. I worked on each CBK until I scored over 90% on self tests. It was very hard going working 16+ hours each day and I wouldn't recommend this as an approach, but it can be effective as a couple of colleagues have done exactly the same and passed in the space of a week of picking up the books.
The problem with spreading out your study is the forgetting curve and the fact you may simply fail to buckle down and get on with it.
I don't really recommend the CISSP CBK for reading. I only recommend it for topics having issues with. I think that the Sybex or AiO (All in One) study guides are probably equally as good. I used the Sybex study guide. I did buy the CBK but never used it. For me a good test bank is important. I did the Sybex questions which were not getting it for me. I ended up using Wentz Wu's questions but feel that Luke's, Thor's, and Boson are equal in results. I definitely recommend Luke's How to Think Like a Manager to better frame the mindset needed to frame the mindset needed to answer the questions correctly. Congratulations on yours.
I don't really recommend the CISSP CBK for reading
Exactly. That's what Chapple's "Official..." book is for. It was waaaaay easier to read.
Just wait until you fancy taking the ISSAP, ISSMP or ISSEP; the chapters refer you to the IETF RFCs a lot. Apart from 2549 they're a bit dry.
Thanks for the advisory. I am doing CySA+ as a winter project, and may do ISSMP next summer.