Risk management professionals find 60-70 hours of time for preparation quite adequate to clear the CISSP exam. IT professionals would need less time – 40-50 hours of study should suffice to clear the exam.