If you want to pass the CISSP certification exam, you must meet the following conditions:
1. Comply with the rules and regulations of (www.isc2.org)2 (see ISC for details).
2. He has worked in one or more of the 10 examination fields specified by CBK (public knowledge system) for more than 3 years. You can be a practitioner, auditor, consultant, customer, investor or teacher in information security-related fields, and you are required to directly apply information system security knowledge in your work. Three years of practical work can be accumulated.
3. Re-certification is required every 3 years, and the continuing professional education (CPE) credit of 120 is required within 3 years.
Only with the above three conditions can you be qualified to take the certification examination of CISSP. Is it harsh? But the higher the threshold, the higher the ability you gain, and the pay and the gain are always in direct proportion.
In addition, from June 2002 1, (ISC)2 divided the process of obtaining CISSP into two steps: authentication and inspection. After passing the exam, you must get the approval of a third party before you can finally get the CISSP certificate. The third party may be the recommender's employer or other certified professionals. This measure increases the difficulty of obtaining CISSP, but it also clarifies the difference between CISSP and other security certifications and maintains the authority of CISSP.