CISSP
CISSP · Certified Information Systems Security Professional · ISC2 · Associate of ISC2
A professional certification from ISC2, one of the most widely recognised in the world, attesting to proven experience and a broad view of information security.
In practice
The exam covers eight domains, from security and risk management to software development security, by way of identity, networks and security operations. It is adaptive (CAT): 100 to 150 questions in 3 hours, with difficulty adjusting to your answers and a pass mark of 700 out of 1,000. The credential requires five years of paid work experience in at least two of the eight domains; candidates who pass without that experience become an “Associate of ISC2” until they gain it. The exam costs US$749 (€719 in Europe), and the credential is maintained with 120 continuing professional education (CPE) credits over three years and an annual fee.
Fictional case: Inès, a systems administrator for six years, passes the CISSP. Her experience covers the network and security operations domains, so she is awarded the credential straight away and joins the CISO’s team as deputy.
