Is cissp difficult because.. Because it's technical knowledge is challenging or that most of us studying for it and taking it are using it as a jump off point from engineering into management and we are still looking at things from an engineers point of view?  I've noticed a good portion of the answers on the review questions or practice exams are because I'm over thinking the answers and looking at it with engineers eyes.