What is a Certified Information Systems Security Professional?

A CISSP is a credential that validates a person’s knowledge across information systems security at a leadership level. CISSP is an independent information security certification granted by the International Information System Security Certification Consortium, also known as (ISC)². The CISSP meets the requirements of ANSI/ISO/IEC Standard 17024, a professional certification accreditation program.

Why is CISSP certification important?

The CISSP demonstrates a professional with knowledge on how to effectively design, implement and manage a top-notch cybersecurity program. The CISSP credential demonstrates a person’s extensive knowledge across information systems security. The CISSP credential is known globally as one of the most sought after certifications for cybersecurity roles. 

Who needs a CISSP credential?

The CISSP is tailored towards experienced security practitioners, managers and executives that want to demonstrate their expertise across a wide array of security practices and principles. The credential is often associated with roles such as:

  • Chief Information Security Officer
  • Chief Information Officer
  • Director of Security
  • IT Director/Manager
  • Security Systems Engineer
  • Security Analyst
  • Security Manager
  • Security Auditor
  • Security Architect
  • Security Consultant
  • Network Architect

How to get CISSP certified

In order to be qualified for this cybersecurity certification, a person must pass the exam and have at least five years of cumulative, paid work experience in two or more of the eight domains of the (ISC)² CISSP Common Body of Knowledge (CBK).  

The eight CISSP Domains are: 

  • Domain 1. Security and Risk Management
  • Domain 2. Asset Security
  • Domain 3. Security Architecture and Engineering
  • Domain 4. Communication and Network Security
  • Domain 5. Identity and Access Management (IAM)
  • Domain 6. Security Assessment and Testing
  • Domain 7. Security Operations
  • Domain 8. Software Development Security

Who is the certifying association

CISSP is an independent information security certification granted by the International Information System Security Certification Consortium, also known as (ISC)². The (ISC)² is an international, nonprofit membership association for information security leaders.

Requirements to stay certified

The CISSP credential is valid for three years and must be renewed either by submitting 40 Continuing Professional Education (CPE) credits per year over three years or re-taking the exam. CPE credits are granted through completion of relevant professional education programs.