How I Passed the CISSP While Working Full-Time in GRC and Compliance

A security professional with 14 years in GRC and compliance passed the CISSP on his first attempt, preparing for 5-6 months while working full-time with LearnZapp as his primary tool. Here's how he did it.

Uday Kiran Mallareddy
Uday Kiran Mallareddy
Associate Advisor, Information Security · Passed CISSP, 2026
Verified LearnZapp user 3 min read

The short version: I've spent 14 years in information security, governance, risk, and compliance. I prepared for the CISSP for about 5-6 months while working full-time, using LearnZapp as my primary tool. I skipped reading the Official Study Guide cover to cover and instead focused on understanding concepts, tracking my weak domains, and practicing consistently. My readiness score was 84% before exam day, and I hit both of my goals: pass on the first attempt, and finish the exam within 100 questions.

How much experience did I have before taking the CISSP?

I had around 14 years of experience in information security, with most of my work focused on governance, risk management, compliance, regulatory audits, and security assessments.

That experience helped, but I quickly realized that the CISSP tests a broad range of security concepts, many of which may not be part of your day-to-day responsibilities.

What resources did I use?

My primary resource was LearnZapp.

In addition, I regularly used:

  • Pete Zerger's CISSP videos
  • Prabh Nair's CISSP content
  • Andrew Ramdayal's CISSP videos
  • Destination Certification videos
  • Prashant Mohan's Memory Palace as a final refresher

I found Memory Palace particularly useful during the final phase of preparation because it helped reinforce key concepts in a concise and easy-to-review format.

What was the toughest part of my preparation?

One of the toughest parts came when my scores in a few domains seemed stuck despite consistent studying. It was frustrating, especially with my industry experience.

Instead of spending more time studying, I focused on understanding why I was getting questions wrong and spent more time strengthening those weaker domains. That shift in approach made a significant difference.

How did I use LearnZapp?

I used LearnZapp almost every day throughout my preparation.

What I appreciated most was the detailed explanations behind each question. Reviewing both correct and incorrect answers helped me better understand concepts and learn from my mistakes. I also found the question style closely resembled the actual CISSP exam, and the user-friendly interface made it easy to practice consistently.

What readiness score did I aim for?

I set clear goals from the beginning:

  • Achieve a readiness score above 80%
  • Maintain domain scores above 70%
  • Pass on the first attempt
  • Complete the exam within 100 questions

By exam day, my LearnZapp readiness score had reached 84%, which gave me confidence that I was ready.

84% My LearnZapp readiness score before exam day

Did I use the Flashcards feature?

Absolutely. During the final weeks before the exam, I used the Flashcards section as a quick refresher for the domains I considered weaker or more challenging. It was an efficient way to reinforce key concepts and revise important topics without going back through lengthy study materials.

What advice would I give someone preparing for the CISSP?

  1. Focus on understanding concepts, not memorizing answers.
  2. Track your weak domains and spend more time improving them.
  3. Review explanations carefully, especially for questions you get wrong.
  4. Use readiness scores and domain scores to measure progress.
  5. Stay consistent. Small daily study sessions add up over time.
  6. Use flashcards and concise refreshers like Memory Palace during the final revision phase.

You don't need every CISSP resource available. For me, LearnZapp, a few trusted YouTube channels, Memory Palace for revision, and consistent practice over 5-6 months were enough to help me pass on my first attempt.

Passing the CISSP was a significant personal and professional milestone for me. If you're willing to stay consistent, focus on your weaker domains, and trust the process, the CISSP is absolutely achievable.


Uday Kiran Mallareddy shared this story with us after passing his CISSP, and we're publishing it in his own words, with his permission, to help other candidates. If LearnZapp was part of how you passed, we'd love to hear from you.

CISSP
2,200+ practice questions
How ready are you for the CISSP?
Take a 20-question diagnostic and see exactly which of the 8 domains need work.
Take Diagnostic →
Free · No account required

Contact Us

Have a question or feedback? We typically respond within 24 hours.

We'll reply to your email address. No spam, ever.