Prerequisite
In order to provide comprehensive and sufficiently in-depth training, a solid understanding of common security mechanisms and several years of experience with general principles of IT in at least two of the areas of network technology, communication, software development, risk management, IT operations or requirements engineering are required. Willingness to engage with the content beyond the course is required. Prerequisite for taking the exam is at least 5 years of professional experience in at least 2 of the CBK subject areas (or 4 years plus a university degree). The CISSP certificate is only awarded by the ISC2 after a successful examination and an endorsement by a CISSP (e.g. by the trainer). The endorsement confirms the necessary professional experience and other requirements for the certificate. The certificate is valid for 3 years. In order to maintain the validity beyond this period, at least 120 CPE points must be proven (CPE = Continous Professional Education). CPE can be achieved without any problems, more details will be discussed in the course of the training. Otherwise, the examination must be taken and passed again after 3 years.
Several years of professional experience in IT and/or information security is required for participation in this course.
For successful certification as a CISSP are required:
5 years of professional experience in at least two of the eight CISSP CBK domains:
Security and Risk Management
Asset Security
Security Architecture and Engineering
Communication and Network Security
Identity and Access Management (IAM)
Security Assessment and Testing
Security Operations
Software Development Security
Reference:
If you lack the necessary professional experience, it is still possible to take the course and the exam. You can collect this experience afterwards and prove it up to 5 years after taking the exam. Until then, you are considered a CISSP, Associate of (ISC)². Credit can be given for existing qualifications (such as university degrees other certifications).