The Certified Information Systems Security Professional (CISSP) exam is the required exam for the ISC2 certification.  Candidates for the CISSP credential are experienced security practitioners, managers and executives interested in proving their knowledge across a wide array of security practices and principles. Candidates must have a minimum of 5 years cumulative, paid full-time work experience in 2 or more of the 8 domains of the CISSP CBK. A candidate that doesn’t have the required experience to become a CISSP may become an Associate of ISC2 by successfully passing the CISSP examination.  The Associate of ISC2 will then have 6 years to earn the 5 years of required experience.

The CISSP certification draws from a comprehensive, up-to-date, global Common Body of Knowledge (CBK®) that ensures security leaders have a deep knowledge and understanding of new threats, technologies, regulations, standards and practices.  The CISSP exam tests the candidate’s competence in the following eight (8) domains:

• Security and Risk Management
• Asset Security
• Security Architecture and Engineering
• Communication and Network Security
• Identity and Access Management (IAM)
• Security Assessment and Testing
• Security Operations
• Software Development Security