CISSP (Certified Information System Security Professional)
|
 |
CISSP is the term used for the (Certified Information System Security Professional). A certification reflecting the qualifications of information systems security practitioners.The CISSP examination is a six (6) hours exam that consists of 250 multiple choice questions, covering topics such as Access Control Systems, Cryptography, and Security Management Practices, and is administered by the International Information Systems Security Certification Consortium or (ISC)².
As of January 2013, (ISC)² reports 85,285 members hold the CISSP certification world wide, in 143 countries. The CISSP certification has become the gold standard in information security certifications and education. (ISC)² promotes the CISSP exam as an aid to evaluating personnel performing information security functions. CISSP.com is a web portal for the certified information systems security professionals to help promote the CISSP Certification, share knowledge and communication amongst certified information system security professionals and is an information service website to help information security professionals who are seeking to become CISSPs.
In June 2004, the CISSP has obtained accreditation by ANSI ISO/IEC Standard 17024:2003 accreditation. It is also formally approved by the U.S. Department of Defense (DoD) in both their Information Assurance Technical (IAT) and Managerial (IAM) categories for their DoDD 8570 certification requirement. The CISSP has been adopted as a baseline for the U.S. National Security Agency's ISSEP program.
As of January 2013, (ISC)² reports 85,285 members hold the CISSP certification world wide, in 143 countries. The CISSP certification has become the gold standard in information security certifications and education. (ISC)² promotes the CISSP exam as an aid to evaluating personnel performing information security functions. CISSP.com is a web portal for the certified information systems security professionals to help promote the CISSP Certification, share knowledge and communication amongst certified information system security professionals and is an information service website to help information security professionals who are seeking to become CISSPs.
In June 2004, the CISSP has obtained accreditation by ANSI ISO/IEC Standard 17024:2003 accreditation. It is also formally approved by the U.S. Department of Defense (DoD) in both their Information Assurance Technical (IAT) and Managerial (IAM) categories for their DoDD 8570 certification requirement. The CISSP has been adopted as a baseline for the U.S. National Security Agency's ISSEP program.
About the CISSP Exam
The CISSP examination itself is a grueling six-hour, 250-question marathon. To put that into perspective, in six hours, you could walk about 20 miles, watch a Kevin Costner movie 11⁄2 times, or sing “My Way” 540 times on a karaoke machine. Each of these feats, respectively, closely approximates the physical, mental (not intellectual), and emotional toll of the CISSP examination.
As described by the (ISC)2, you need a scaled score of 700 or better to pass the examination. Not all the questions are weighted equally, so we can’t absolutely state the number of correct questions required for a passing score.
You won’t find any multiple-answer, fill-in-the-blank, scenario-based, or simulation questions on the CISSP exam. However, all 250 multiple-choice questions require you to select the best answer from four possible choices. So the correct answer isn’t always a straightforward, clear choice. In fact, you can count on many questions to appear initially as if they have more than one correct answer.
As described by the (ISC)2, you need a scaled score of 700 or better to pass the examination. Not all the questions are weighted equally, so we can’t absolutely state the number of correct questions required for a passing score.
You won’t find any multiple-answer, fill-in-the-blank, scenario-based, or simulation questions on the CISSP exam. However, all 250 multiple-choice questions require you to select the best answer from four possible choices. So the correct answer isn’t always a straightforward, clear choice. In fact, you can count on many questions to appear initially as if they have more than one correct answer.
After the Exam
After passing the CISSP examination, you must submit a qualified third-party endorsement (from another CISSP, your employer, or any licensed, certified, or commissioned professional — such as a banker, attorney, or certified public accountant) to validate your work experience. This endorsement must be submitted within 90 days of your exam; otherwise your application and exam results are voided. (ISC)2 randomly audits a percentage of submitted applications, requiring additional documentation (normally a résumé and confirmation from employers of work history) and review by (ISC)2. Within one business day (seven business days, if audited) after it receives the endorsement, (ISC)2 normally sends final notification of certification via e-mail.
After you earn your CISSP certification, you must remain an (ISC)2 member in good standing and renew your certification every three years. You can renew the CISSP certification by accumulating 120 Continuing Professional Education (CPE) credits or by retaking the CISSP examination. You must earn a minimum of 20 CPE credits during each year of your three-year recertification cycle. You earn CPE credits for various activities, including taking educational courses or attending seminars and security conferences, belonging to association chapters and attending meetings, viewing vendor presentations, completing university or college courses, providing security training, publishing security articles or books, serving on relevant industry boards, taking part in self-study, and doing related volunteer work. You must document your annual CPE activities on the secure (ISC)2 website to receive proper credit. You also have to pay an $85 annual maintenance fee, payable to (ISC)2. Maintenance fees are billed arrears for the preceding year, and you can pay them online, also in the secure area of the (ISC)2 website.
After you earn your CISSP certification, you must remain an (ISC)2 member in good standing and renew your certification every three years. You can renew the CISSP certification by accumulating 120 Continuing Professional Education (CPE) credits or by retaking the CISSP examination. You must earn a minimum of 20 CPE credits during each year of your three-year recertification cycle. You earn CPE credits for various activities, including taking educational courses or attending seminars and security conferences, belonging to association chapters and attending meetings, viewing vendor presentations, completing university or college courses, providing security training, publishing security articles or books, serving on relevant industry boards, taking part in self-study, and doing related volunteer work. You must document your annual CPE activities on the secure (ISC)2 website to receive proper credit. You also have to pay an $85 annual maintenance fee, payable to (ISC)2. Maintenance fees are billed arrears for the preceding year, and you can pay them online, also in the secure area of the (ISC)2 website.
