From the CISSP Exam to the CISSP Certification: An A-Z Guide

1. The CISSP candidate can pursue the certification through several means:

 

 

2. Register for the CISSP exam with Pearson Vue

 

3. Take and pass the CISSP exam at a Pearson Vue testing center

 

4. Once notified by (ISC)2 that the exam is officially passed, obtain a sponsor who has already been certified by (ISC)2 in one of (ISC)2’s certification programs

 

5. Obtain the required experience needed for the CISSP certification, or ensure that a full-time position is available to obtain the experience after receiving the certification

 

(ISC)2 requires that a CISSP candidate have at least 5 years of experience in 2 or more of the CISSP domains. The experience is needed to both understand the concepts covered within the CISSP and to demonstrate to employers the ability to integrate experience with knowledge.

 

(ISC)2 allows the CISSP candidate to waive 1 year of the experience requirement by having a degree from a higher learning institution that meets the criteria specified by (ISC)2. Normally, this degree should be in a technical or science field of study – engineering, computer/ information sciences, mathematics, but a candidate can submit their request to (ISC)2 and obtain a decision regardless of degree program area.

 

(ISC)2 allows the CISSP candidate to take the exam without the requisite experience, and if the candidate passes the exam, (ISC)2 issues the CISSP certification to the candidate and notifies the candidate that they are an ‘Associate of (ISC)2’ until they obtain the required 5 years of experience. The candidate has 6 years to obtain the 5 years of experience.

 

The CISSP certification is a difficult certification to obtain. For some candidates, they are able to take a class, study the materials and pass the exam the first time. For other candidates, they need to retake the class, and continue to study the materials for a second exam attempt. The most important point to remember – stay focused and pursue your goals and you will obtain the CISSP certification.

1. A CISSP candidate is notified at the Pearson Vue testing facility of their pass or fail score. If a passing score is obtained, you will be informed that you “Provisionally Passed”. This means that you passed the exam and now (ISC)2 will review the exam you took, the answers provided, and ensure no anomalies or errors are found. Rarely are there any complications in this process.

 

2. The CISSP candidate will be notified within 1-2 weeks that they officially passed the exam and may apply for the CISSP certification.

 

3. The CISSP candidate must identify a (ISC)2 certified member (someone who is currently an (ISC)2 certification holder) to sponsor them for the certification – the sponsor is attesting to the candidate’s experience and has met the requirements.

 

4. The CISSP candidate applies for the CISSP certification through the (ISC)2 website portal.

 

5. The CISSP candidate will normally receive notification from (ISC)2 within 4-6 weeks that they are a CISSP and a full member of (ISC)2 or that they are an Associate of (ISC)2 if they still need to obtain some of the experience requirements as outlined for the CISSP.

The CISSP is valid for 3-years and is renewable through Continuing Professional Education (CPE) units.

 

A CISSP member enters into their (ISC)2 portal the CPEs earned during a year. As long as a CISSP member obtains the required CPEs each year and pays their annual CISSP maintenance fee ($85/year), the CISSP member is not required to retake the exam.

 

www.boson.com ($99/year)

 

Numerous Online question banks – be careful as some are not valid – stick to reputable sites backed by (ISC)2

 

The job market has hundreds of different titles for positions related to cybersecurity and/or information security. Depending on a candidate’s experience, a candidate with a CISSP can pursue Analyst, Forensics, Malware, Information Assurance, Security Control Assessor, Engineer, or Director-level positions.

 

The numbers of positions demanding cybersecurity and/or information security expertise is dramatically increasing with more positions needing filled than experts to fill them.

 

 

The past 30 years has seen explosive growth in technology and the use of these advancements into our workplace, our homes, and into every aspect of our lives. Smart devices, artificial intelligence, quantum computing, medical technology, and industrial control systems are completely interlaced into our society, our culture, and our relationships. As fast as we have embraced these technologies into our lives, threats have been devising and embracing ways to use these same technologies to gain access to resources that we have – our privacy, our financial instruments, our reputations, our security. It’s too easy to say, ‘reverse our dependence’, but that’s like saying ‘stop breathing’.

Gaining the CISSP certification is not easy – it shouldn’t be. It takes months of study, even for those who are on the technical side of information security – system or network engineers, analysts, forensics, and scientists. The CISSP is not just a technical certification, it is a management level certification as well. It took time, study, and dedication to get to where you are today – devote that same attention to the CISSP and you will be successful. The good aspect of the CISSP is that it builds upon what you already know whether you’re in a technical or management career field; therefore, it won’t take you years to obtain. Seek out a superb training organization and engage with an expert instructor who can bring to reality all of the concepts and terms associated with the CISSP – the instructor will challenge you over a week of class, but you will gain an enormous appreciation for the broad scope of the CISSP and the details required to pass the exam and obtain the CISSP.