CISSP® - How to Certify
There are four processes a candidate must successfully complete to become a certified CISSP®:
- Examination
- Certification
- Endorsement
- Audit
Examination
To sit for the CISSP examination, a candidate must:
- Sign up for the examination date and location
- Submit the examination fee
- Assert that he or she possesses a minimum of five years of professional experience in the information security field or four years plus a college degree. Or, an Advanced Degree in Information Security from a National Center of Excellence or the regional equivalent can substitute for one year towards the five-year requirement.
- Complete the Examination Agreement, attesting to the truth of his or her assertions regarding professional experience, and legally committing to the adherence of the (ISC)²Code of Ethics
- Successfully answer four questions regarding criminal history and related background
Certification
To be issued a certificate, a candidate must:
- Pass the CISSP examination with a scaled score of 700 points or greater
- Submit a properly completed and executed Endorsement Form.
- Successfully pass an audit of their assertions regarding professional experience, if the candidate is selected for audit
Endorsement
Once a candidate has been notified they have successfully passed the CISSP examination, he or she will be required to have his or her application endorsed before the credential can be awarded.
The endorser attests that the candidate's assertions regarding professional experience are true to the best of their knowledge, and that the candidate is in good standing within the information security industry. More on endorsement.
Audit
Passing candidates will be randomly selected and audited by (ISC)² Services prior to issuance of any certificate. Multiple certifications may result in a candidate being audited more than once.
Maintenance Requirements
Recertification is also required every three years, with ongoing requirements to maintain your credentials in good standing. This is primarily accomplished through continuing professional education [CPE], 120 credits of which are required every three years. A minimum of 20 CPEs must be posted during each year of the three-year certification cycle. More information on qualifying CPEs will be available upon certification.
CISSPs must also pay an annual maintenance fee of $85 per year.