CISSP - Certified Information Systems Security Profession

CISSP stands for Certified Information Systems Security Professional. It’s a globally recognized certification in the field of information security and is governed by the International Information Systems Security Certification Consortium, also known as (ISC)².

The CISSP certification validates the candidate’s ability to effectively design, implement, and manage a best-in-class cybersecurity program. It’s ideal for experienced security practitioners, managers, and executives interested in proving their knowledge across a wide array of security practices and principles.

To earn the CISSP certification, candidates must have at least five years of cumulative, paid, full-time work experience in two or more of the eight domains of the CISSP Common Body of Knowledge (CBK). The eight domains are:

1. Security and Risk Management
2. Asset Security
3. Security Architecture and Engineering
4. Communication and Network Security
5. Identity and Access Management (IAM)
6. Security Assessment and Testing
7. Security Operations
8. Software Development Security

Candidates must also pass the CISSP exam and agree to the (ISC)² Code of Ethics. After earning the CISSP certification, it must be maintained through continuing professional education (CPE) credits.