The (ISC)2 board of directors has approved new experience requirements
for the CISSP certification, effective 1 October, 2007. While these
changes will not affect current holders of the CISSP or those scheduled to take
the exam by 30 September 2007, we wanted you to be aware of
It is the responsibility of the (ISC)2 board of directors to continually
review the entire spectrum of the consortium’s education and
certification programs to ensure that (ISC)2 continues to provide the
“gold standard” of professional certification in the information
security industry. The board believes these new requirements will assure
organizations worldwide that CISSPs have demonstrated they can meet the
challenges of an ever-increasing threat environment, while you as an (ISC)2
member can be assured that the rigorous standards of the CISSP are being
maintained in a maturing profession.
The new requirements include the following components:
minimum professional experience requirement for CISSP
certification will be five years of relevant work experience in
two or more of the 10
domains of the CISSP CBK, or
four years of work experience with an applicable college degree or a credential from the
(ISC)2-approved list. The current requirements for the
CISSP call for four years of work experience in one or more of the 10 domains of the CISSP CBK, or
three years of experience with an applicable college degree or a
credential from the (ISC)2-approved list.
- Candidates for any (ISC)2 credential will be required to obtain an endorsement of their candidature exclusively from an (ISC)2-certified professional in good standing.
The professional endorsing the candidate can hold any (ISC)2 certification
– CISSP, SSCP or CAP.
Currently, candidates can be endorsed by an officer from the
candidate’s organization if no CISSP endorsement can be obtained.
The board believes that only an (ISC)2-credentialed professional
bound by its Code of Ethics
should provide a candidate endorsement.
Should you have any questions, please visit https://www.isc2.org/cgi-bin/content.cgi?page=1227 or contact
us at email@example.com.