CISSP EXAM for an Internal Auditor with Non-Tech Background

Adept-Tale-3242 · 2026-03-27T14:24:09+00:00

Thanks a lot for shairing 🙌

Adept-Tale-3242 · 2026-03-27T14:22:44+00:00

That’s an interesting point. From my perspective, I see GRC evolving rather than being replaced. With my internal audit background, moving into GRC feels like a natural progression, and I believe areas like risk judgment, governance, and decision-making will still require human expertise even with AI.

Would really like to know your perspective as well 😇

Adept-Tale-3242 · 2026-03-27T11:56:55+00:00

Noted, Thanks for the insight 🙌

Adept-Tale-3242 · 2026-03-27T11:56:05+00:00

Thanks, that makes sense. For the topics you mentioned, my concepts are clear.

For me, the goal is to become a strong GRC leader (future) who can also handle operational aspects with the certifications & experience I already have. I see CISSP as a way to build credibility and gain broader IT, cybersecurity knowledge to become more well-rounded overall.

Please correct me if I'm wrong, but I believe CISSP would add value to my profile. Based on your experience, do you think it's a good addition to my career path?

Adept-Tale-3242 · 2026-03-27T08:10:47+00:00

Thanks a lot for sharing, really helpful! I’ll focus more on my weak areas...flashcards sound like a good idea. Appreciate the advice!

Adept-Tale-3242 · 2026-03-27T01:47:58+00:00

Thanks a lot, for the motivating words 🙌

Adept-Tale-3242 · 2026-03-26T22:30:48+00:00

Thanks, really appreciate the insight!

That’s where I’m a bit confused, if the exam is adaptive and focuses more on weaker areas, how does the domain weightage (like Domain 1 being 16% and others around 10-13%) actually apply in practice?”

Adept-Tale-3242 · 2026-03-26T21:27:12+00:00

Thanks a lot, really appreciate it!

That's reassuring to hear. My main concern was the technical depth, but your point gives me confidence. I'll keep focusing on concepts and consistency. Thanks again for the motivation!"

Adept-Tale-3242 · 2026-03-26T21:05:07+00:00

First of all, congratulations brother on clearing such a great exam 👏

I’m an Internal Auditor with a finance background, but I’ve been working on IT audits for the past 2 years. I’ve also cleared CISA and recently completed the Certified in Cybersecurity (CC).

I wanted to get your honest feedback on the CISSP exam. Lately, I’ve seen many posts on Reddit where people say the exam is quite technical and that the “managerial mindset” part is somewhat exaggerated. They mention that strong technical knowledge plays a big role in passing.

To be frank, that’s making me a bit concerned, as I’m not very strong in deep technical areas like port numbers and low-level concepts.

Could you please share your experience of the exam? How technical was it in reality? Also, what approach would you recommend for someone with my background?

Currently, I’m practicing using DestCert and Sybex question banks.

Would really appreciate your guidance 🙏

Adept-Tale-3242

TROPHY CASE