Security+ study plan: take a diagnostic, place yourself, then cut the hours into four stages
CompTIA gives no study-hour figure. Take one diagnostic practice test, place yourself between 60 and 100 hours, divide by your real weekly hours, add about one buffer week for every eight and split the total into four stages: foundation, first coverage, practice and simulation.
A plan copied from someone else's hours is a plan for their life.
Why you test before you plan
A study plan is arithmetic on two numbers: the hours you need and the hours you have. The second you know. The first you only guess, unless you measure it.
CompTIA publishes no single figure. CredenTrek's working assumption for someone with IT experience is 60 to 100 hours. Take one diagnostic practice test before you buy anything else, and place yourself in that band. Strong results across the domains point towards 60 hours. Gaps in several domains point towards 100 or more.
Experience matters here, but it does not decide for you. For V7, CompTIA recommends Network+ and about two years in a security or systems administrator role. For V8, it recommends two years of hands-on experience as a security administrator. Without that, expect to land nearer the top of the band.
The four stages
Security+ rewards hands-on practice, so labs and questions take half the plan.
| Stage | Share | What happens |
|---|---|---|
| A, foundation | About 10% | Rate yourself on every objective, take the diagnostic, set up your lab |
| B, first coverage | About 40% | Work through your course once, with a lab for each domain |
| C, practice | About 35% | Question sets by domain, performance-based practice, review of every wrong answer |
| D, simulation | About 15% | Full timed practice exams and light revision |
A worked plan at the top of the band
Take a candidate whose diagnostic points to 100 hours and who can give 10 hours in an ordinary week.
- 100 divided by 10 gives 10 weeks.
- Add one buffer week, giving 11 (about one for every eight weeks of study).
- Book the exam in week 12, after the buffer.
The stage hours are 10 for A, 40 for B, 35 for C and 15 for D, which adds back to 100. At ten hours a week, A fills week 1 and B fills weeks 2 to 5. C runs through weeks 6 to 8 and half of week 9, and D takes the rest of week 9 and week 10.
What the same total needs at other paces
For an 80-hour plan the picture shifts with your pace: 16 weeks at 5 hours a week, 8 weeks at 10, or 5 weeks at 16. CredenTrek groups the weekly pace into three tracks:
- Light: 3 to 6 hours.
- Standard: 7 to 12 hours.
- Intensive: 13 to 20 or more.
A plan to finish in 30 days is about 4.3 weeks. With 80 hours, that needs roughly 19 hours a week, which sits in the intensive track and leaves no buffer.
Move hours to your gaps
When Stage A ends, you will have a self-rating on every objective. Take your five lowest scores and shift hours towards them. Rating yourself 2 out of 5 on an objective and giving it the same time as one rated 5 is a poor use of a week.
Choose one set of material
Pick one course route and stop buying. Mixing a video course, two books and three practice apps means switching between them and never building hands-on skill.
Booking against the plan
Readiness is a pattern, not a single score. Look for consistent results across two or three full practice exams, no domain far behind the others, and confidence with performance-based tasks. If one domain lags, add a week of targeted practice, and book against the end of your plan.
Questions readers ask
How many hours should I plan for Security+?
Can I pass Security+ in 30 days?
Is the 750 pass mark 75 per cent?
This article is independent and is not endorsed by CompTIA. Facts change: confirm them on the official page before you act.