CISSP

The CISSP (Certified Information Systems Security Professional) certification is issued by the International Information System Security Certification Consortium. This organization is globally recognized by its acronym, (ISC)². It is the premier cybersecurity credentialing body in the world.

To hold the full CISSP credential, candidates must have at least five years of cumulative, paid work experience in two or more of the eight domains of the CISSP Common Body of Knowledge (CBK). However, candidates who pass the exam without the experience can become an Associate of (ISC)² until they gain the required time. Certain college degrees or other certifications can waive up to one year of experience.

The CISSP exam consists of 100 to 150 questions that must be answered within a maximum of three hours. It utilizes Computerized Adaptive Testing (CAT) for English language exams, meaning the test adapts its difficulty based on your previous answers. The questions are multiple-choice and advanced innovative items.

The eight domains include Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, and Software Development Security. These domains make up the comprehensive framework of information security management. Candidates must demonstrate deep knowledge across all of these areas.