- Why the FITSP-Operator Has No Fixed Exam Calendar
- How Scheduling Actually Works
- Remote vs. In-Person: Check What Is Really Offered
- The Deadlines That Matter More Than Exam Dates
- Retest Windows and the Discounted Second Attempt
- Planning Backward From Your Exam Day
- Exam-Day Logistics and the 30-Minute Rule
- After You Pass: The Clocks That Start Ticking
- Frequently Asked Questions
- FITSI administers and proctors the FITSP-Operator exam; confirm live session availability on its registration page before planning.
- The initial exam costs USD 395; one discounted same-role retest costs USD 197.50 after at least 21 days.
- The exam is 150 multiple-choice items in 3 hours; breaks do not pause the timer.
- Submit your certification application within five years of passing the exam.
Why the FITSP-Operator Has No Fixed Exam Calendar
Candidates searching for "FITSP-Operator exam dates 2026" often expect a published calendar of testing windows like those used by some seasonal or cohort-based certifications. The FITSP-Operator, issued by the Federal IT Security Institute (FITSI), does not frame its scheduling that way. The credential is built around a computer-based examination that FITSI administers and proctors, and the practical question is not "which window is open" but "which session can I actually book, and what do I need in place before I do?"
That distinction shapes everything in this guide. Rather than listing dates that could be wrong by the time you read them, we focus on the mechanics you can verify: the registration process, the time-based rules attached to retests and applications, the logistics of exam day, and the deadlines that begin counting once you pass. If you want a broader orientation first, our overview What Is FITSP-Operator? explains the credential's purpose and audience.
How Scheduling Actually Works
The FITSP-Operator exam is a closed-book, computer-based test delivered in English only. Registration runs through FITSI's exam registration page. Membership with FITSI is optional, so you do not need to join anything simply to sit the exam. The fee for the initial attempt is USD 395, and a full breakdown of what else you may pay over the life of the credential is in our FITSP-Operator certification cost guide.
What you are scheduling
Before you pick a session, it helps to know exactly what the exam demands, because the time commitment on the day is fixed:
| Exam Element | FITSP-Operator Detail |
|---|---|
| Format | Computer-based, multiple-choice |
| Total items | 150 (120 scored, 30 beta) |
| Time allowed | 3 hours |
| Language | English only |
| Reference materials | Closed book; personal calculators prohibited |
| Breaks | Allowed, but they do not extend the timer |
| Initial fee | USD 395 |
Because 30 of the 150 items are unscored beta questions, you will not know which ones count. Treat every item as scored. Three hours across 150 items works out to roughly 72 seconds per question on average, which is tight enough that your preparation should include timed practice. Our difficulty guide explains why the volume of NIST and federal-law references makes pacing a real factor.
Remote vs. In-Person: Check What Is Really Offered
FITSI's handbook describes both in-person and remote delivery. However, the registration page has still labeled in-person testing as unavailable, so the handbook and the live registration page do not perfectly match. For scheduling purposes, this means you should plan around what the registration system actually lets you select, not what the handbook describes in general terms.
If you test remotely
Remote testing requires two devices: a personal computer to take the exam, plus a separate phone or tablet for monitoring. That second device is easy to overlook when you are focused on content, but it is a hard requirement. Test your setup well before exam day so that a dead battery, poor camera angle or unstable connection does not cost you your session.
- Use a personal computer for the exam itself.
- Prepare a separate monitoring phone or tablet with a charged battery and a stable position.
- Have two signed IDs ready, one of which must be a photo ID.
- Connect 30 minutes before your scheduled start.
The Deadlines That Matter More Than Exam Dates
For the FITSP-Operator, the deadlines attached to your credentialing journey matter far more than any single sitting date. FITSI separates passing the exam from becoming certified, and each step has its own clock. Understanding them prevents the most costly scheduling mistake: passing the exam and then letting the opportunity lapse.
The five-year application window
Certification requires five years of information-security experience, an application, a current resume or CV, two professional endorsements, and agreement to the Code of Ethics. Critically, you must submit the application within five years of passing the exam. That means you can, in principle, pass the exam before you have accumulated all the required experience, but you cannot let more than five years pass before applying.
Experience can be partially waived, up to three years in total:
- An accredited bachelor's degree can waive one year.
- An IT or information-assurance master's degree can waive a second year.
- An issuer-listed security certification can waive one more year.
The full eligibility picture is covered in our FITSP-Operator requirements guide. If you are early in your career, mapping these waivers against your timeline tells you whether to sit the exam now or after you have built more experience.
Key Takeaway
Put the five-year application deadline in your calendar the day you pass. The exam result alone does not make you certified; the application, endorsements and ethics agreement do.
Retest Windows and the Discounted Second Attempt
Few exam-date questions are more consequential than "when can I retake it?" FITSI builds in a defined retest structure for the FITSP-Operator. The first retest of the same role is discounted at USD 197.50, which is half the initial fee, but it comes with conditions.
| Retest Rule | Requirement |
|---|---|
| Minimum wait | At least 21 calendar days after the initial exam |
| Maximum window | Within one year of the initial exam |
| Discounted fee | USD 197.50 for one same-role retest |
| Scope | Same role (Operator) |
The 21-day floor is the planning number that matters most. If you fail, you cannot rebook immediately, so a failed attempt effectively costs you at least three weeks. Use that gap productively by reviewing the domains where you felt weakest. Our passing score guide explains how the Operator-specific cut score is set; note that FITSI does not publish a numeric threshold in the handbook we reviewed, so you should not rely on rumored percentages.
The one-year ceiling on the discounted retest also argues for committing to a realistic first-attempt date. Sitting the exam early "just to see" burns the cheaper retest window if you do not follow up with serious preparation. For the broader picture of how often candidates succeed, see what the pass rate data shows.
Planning Backward From Your Exam Day
Once you have confirmed an available session, the most reliable way to schedule your preparation is to work backward and assign domains to weeks based on weight. The six official exam domains are not equal, and your calendar should reflect that. A full explanation of each is in our exam domains guide; the weights below come from FITSI's handbook, effective June 1, 2024.
| Domain | Weight |
|---|---|
| Domain 1: NIST Special Publications (SPs) | 20% |
| Domain 2: NIST Federal Information Processing Standards (FIPS) | 13% |
| Domain 3: NIST Control Families (CFs) | 22% |
| Domain 4: Governmental Laws and Regulations | 19% |
| Domain 5: NIST Risk Management Framework (RMF) | 19% |
| Domain 6: NIST Interagency Reports (NISTIRs) | 7% |
Note that these six weighted domains are distinct from the 18 cross-cutting security topic areas FITSI also describes. Study to the six weighted domains when allocating time, and treat the topic areas as threads that run through them.
Anchor on the heaviest domain
- Domain 3 (NIST Control Families, 22%) is the largest slice, so start here and revisit it weekly.
- Learn how control families group and relate rather than memorizing isolated control names.
Process and policy backbone
- Domain 5 (RMF, 19%) and Domain 4 (Governmental Laws and Regulations, 19%) form a combined 38% of the exam.
- Walk through the RMF steps end to end and tie each to the law or policy that drives it.
Documents and standards
- Domain 1 (NIST SPs, 20%) and Domain 2 (FIPS, 13%) cover the publication set.
- Domain 6 (NISTIRs, 7%) is smallest; give it a short, focused pass rather than a dedicated week.
Timed practice and gap closure
- Run full 150-question sessions against a 3-hour clock.
- Return to your weakest weighted domain for the last review block.
This sequencing puts the 22% and 19% domains early, so you cycle through them multiple times before exam day. For a fuller preparation roadmap, see our FITSP-Operator study guide, and for a quick last-week refresher use the cheat sheet. When you are ready to test yourself under realistic conditions, our FITSP-Operator practice tests mirror the multiple-choice format you will face.
Exam-Day Logistics and the 30-Minute Rule
The exam clock is unforgiving, so the logistics around it deserve the same planning as your content review. Three rules in particular catch candidates off guard.
- Arrive or connect 30 minutes early. This applies to both remote and in-person delivery. Treat it as part of the exam appointment, not a suggestion.
- Bring two signed IDs. One must be a photo ID. Check that both are signed and current well before the day, since replacing an ID takes longer than most candidates expect.
- Remember that breaks do not pause the timer. The 3-hour limit keeps running if you step away, so any break comes straight out of your answering time.
If you are choosing a time of day, pick the window when you are sharpest, and avoid scheduling the exam right after a full workday. A 3-hour sitting with no timer pause rewards stamina, so rest matters as much as one more review session.
After You Pass: The Clocks That Start Ticking
Passing begins several time-sensitive obligations. Knowing them in advance helps you decide how soon to sit the exam in the first place.
Application and certification validity
As noted above, submit your application within five years of passing. Once you are certified, the credential is valid for three years. This reflects an updated structure: FITSI's earlier NG FAQ from March 3, 2020 described a six-year cycle, but that was superseded by a May 3, 2024 announcement, effective June 1, 2024. If you find older courseware or forum posts citing six years, treat them as outdated.
Staying certified
- Recertify by earning 60 CPE credits per certification over the three-year cycle, or by retesting at the end of it.
- Observe the Code of Ethics throughout.
- Pay the USD 75 annual maintenance fee.
These ongoing obligations are part of the credential's true cost and time commitment, which is worth weighing when you ask whether it is right for you. Our ROI analysis and salary guide help frame that decision, and the FITSP-Operator jobs overview shows the federal and contractor roles where the credential is most relevant.
Key Takeaway
Think of "exam dates" as just one of four clocks: the retest window (21 days to one year), the five-year application deadline, the three-year certification cycle, and the annual maintenance fee date. Track all four.
Frequently Asked Questions
FITSI administers and proctors the computer-based exam, and scheduling runs through its registration page. Rather than assuming a fixed calendar, check the live registration page for the sessions you can actually book, since availability can change.
You must wait at least 21 calendar days after the initial exam. The discounted same-role retest costs USD 197.50 and must be taken within one year of the initial attempt.
The handbook describes remote delivery, which uses a personal computer plus a separate monitoring phone or tablet. However, registration has still labeled in-person testing as unavailable, so confirm which delivery options are actually offered before you plan.
You can submit your certification application up to five years after passing the exam. Certain education and certification credentials can waive up to three years of the experience requirement, so review the details in our requirements guide.
The certification is valid for three years. To recertify, earn 60 CPE credits per certification over that cycle or retest at its end, follow the Code of Ethics and pay the USD 75 annual maintenance fee. An older six-year cycle was superseded effective June 1, 2024.