(ISC)² Blog

How I Prepared for the CISSP Exam

By Joseph Montes, CISSP In 2021, I decided to pursue the CISSP. I was looking for a certification that would help me to stand out and prove to myself and my peers that I know my field. I had experience in Unix, Irix, Linux, Windows, Networks, Servers, storage, project management, virtualization, telecommunications, terrestrial and submarine networks. I had some certifications and a master’s degree in Cyber Security. CISSP seemed like the most sensible progression in my career. STARTING MY JOURNEY TO CISSP Things started simple enough. I researched what I needed to know. I started looking at Reddit, Discord and... Read more →

CISSP Recognized as Top Cybersecurity Certification

The CISSP (Certified Information Systems Security Professional) certification got a few thumbs-up in a recent Dice article about whether cybersecurity jobseekers need certifications to land a position. Several cybersecurity professionals quoted in the article named the CISSP as a valuable certification. “I always recommend the Certified Information Systems Security Professional Cert (CISSP). For years, this has been the dominating certification in the cybersecurity industry. It is still a top-tier certification, and I would recommend it to anyone serious about a career in cybersecurity,” said Steve Tcherchian, Chief Product Officer at XYPRO. Magda Chelly, a cybersecurity author and researcher, cited the... Read more →

(ISC)² Concludes Online Proctored Exams Do Not Meet Exam Security Standards

Recognizing that potential barriers to certification globally are the time and resources some candidates must invest to travel to a test center, as well as ongoing health and safety concerns from the pandemic, (ISC)² began exploring online proctoring in 2021 for its cybersecurity certifications, including the renowned (ISC)² CISSP.  After two extensive pilot programs using the most stringent security protocols available, (ISC)² has concluded that online proctored exams do not satisfy its standards for security and integrity for exam administration.    During both pilot tests, (ISC)² and its leading exam delivery and security partners, documented widespread irregular exam results, clear violations... Read more →

Update on (ISC)² Entry-Level Cybersecurity Certification Pilot

More than 1,400 individuals have taken the new (ISC)² entry-level cybersecurity certification exam during the pilot phase which began in January 2022. Scheduling for the pilot is currently available through August 26 and anyone interested in sitting for the “no experience required” exam may do so through an authorized Pearson VUE test center. Before a certification exam becomes fully operational, the pilot tests undergo a rigorous process of exploration, research, and validation necessary to ensure the qualification meets its intended purpose. All exams administered during the pilot phase thus far are currently undergoing this review and analysis. When the pilot... Read more →

(ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

We are excited to announce that more than 1,000 cybersecurity career hopefuls have taken their first step toward launching their careers by taking the (ISC)² entry-level cybersecurity certification pilot exam. Once they earn the certification, they will demonstrate to employers they have the foundational knowledge, skills and abilities to succeed in entry- and junior-level roles. Since the program’s inception earlier this year, more than 1,000 people around the world have taken the exam and many have registered for the (ISC)² entry-level cybersecurity certification course with their exam still to come. With the global cybersecurity workforce needing to grow by 65%... Read more →

CCSP Exam – Many Changes on the Way!

On August 1, several changes will be made to the CCSP exam. We are excited to share that the CCSP exam will be available in four more languages. Currently, the CCSP exam is available in English and Japanese. We will also be offering the CCSP exam in Chinese, Korean, German and Spanish beginning in August. In addition to these new languages, we will be updating the length of the CCSP exam. As announced earlier this year for the CISSP exam, 25 pre-test (unscored) items will be added to the exams in all languages. These items do not impact the pass/fail... Read more →

Meet the Young Women Tackling Gender Bias in Cybersecurity

To celebrate Women’s History Month in March, four female security leaders met for a wide-ranging panel discussion on how they’ve broken through gender biases to forge their career paths, as well as what’s needed to help young women in the cybersecurity profession succeed. This (ISC)² Think Tank webinar is part of the organization’s multi-year commitment to DEI which includes a new DEI series featuring diverse voices and perspectives within cyber and aimed at helping to build a more inclusive cyber profession. The panel was moderated by Sharon Smith, CISSP, cybersecurity strategy and advisory consultant, and included: Ebony Stevens, (ISC)² Security... Read more →

How is the CISSP-ISSMP Exam Changing?

The CISSP-ISSMP exam will be changing on November 15, 2022. This exam is the most recent of the (ISC)² examinations to be updated as part of the Job Task Analysis (JTA) process. All (ISC)² certifications are updated on roughly a triennial basis following the JTA process. Current certification holders are surveyed on how often they use the knowledge, skills and abilities represented in the exam outline. Subject matter experts update the exam outline, and the exam itself, based on that feedback to ensure the CISSP-ISSMP exam reflects the most pertinent issues facing cybersecurity management professionals. These updates ensure that anyone... Read more →

Changes to the CISSP Exam Length Coming Soon

Beginning June 1, 2022, additional pretest items and time will be added to the CISSP exam for the Computerized Adaptive Testing (CAT) format. The current CISSP CAT exam contains 25 pretest (unscored) items. The addition of 25 more items will bring the total count to 50 pretest items. With these added items, the minimum and maximum number of items candidates will need to respond to during the exam will increase from 100-150 to 125-175. To allow for these additional items, the maximum exam administration time will increase from three to four hours. Pretest items enable (ISC)² to continue expanding our... Read more →

An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

The Need for Entry-level Cybersecurity Education Is Critical As any employer who has tried to fill a vacant cybersecurity position knows, finding qualified candidates is anything but easy. The cybersecurity workforce would have to expand by 65% to meet global demand, according to (ISC)²'s 2021 Cybersecurity Workforce Study. Employers, therefore, need to keep an open mind when filling those positions by considering candidates with less experience. Once on board, however, new hires can be brought up to speed through education and certification. Even with sparse experience, a cybersecurity professional should be able to demonstrate an acceptable level of proficiency in... Read more →

HOW TO TAKE THE CISSP EXAM ONLINE – REGISTRATION IS OPEN!

Registration for the second (ISC)² online proctored CISSP exam pilot program is now open to candidates in the U.S., U.K. and Singapore. Built on results from the association’s first online proctored pilot test in 2021, this pilot program is designed to further assess the viability, and help determine the potential future availability, of online proctoring for (ISC)² certification examinations. The learnings from this pilot program will help us further augment our exam delivery capabilities, ensuring the experience is safe, secure and provides candidates with the best possible opportunity to demonstrate their competence, regardless of the examination delivery method. What’s New... Read more →

Online CISSP Exam Coming Soon

If you are a CISSP exam candidate interested in taking the exam online, please consider participating in our next online proctor pilot program. Our exams team began working with Pearson VUE to explore online testing solutions, and we were able to pilot online exams for the first time last year. Read more about the February 2021 online proctored exams results. (ISC)² announced this week that the next online CISSP proctor pilot test will open for registration on February 14. Seats for the online exams will be limited and will only include the CISSP CAT exam for candidates in the U.S.,... Read more →

DO YOU KNOW SOMEONE INTERESTED IN A CAREER IN CYBERSECURITY? AT JUST $125 THE NEW PILOT EXAM FOR THE (ISC)² ENTRY-LEVEL CERTIFICATION CAN CATAPULT THEIR CAREER FORWARD

In case you missed it, (ISC)² is piloting an entry-level cybersecurity certification exam to help students, young professionals and career changers interested in building a career in cybersecurity receive the education and validation they need on their way to a rewarding career. With a global cybersecurity skills shortage of more than 2.7 million people, this certification plays a critical role in expanding the available talent pool and quickly verifies candidates’ current skills, but more importantly their aptitude for learning on the job. No Experience Required (ISC)² recognizes and supports the growing trend of people entering the cybersecurity workforce without direct... Read more →

Register Today! By Popular Demand, More Entry-Level Cybersecurity Certification Pilot Exam Review Offerings Now Available

(ISC)² has added two additional offerings to our online instructor-led review sessions in support of the new entry-level cybersecurity certification pilot exam. Our recent offering sold out in record time, and these first come, first serve opportunities are expected to do the same. The five domains included in the pilot exam outline are: Security Principles Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts Access Controls Concepts Network Security Security Operations The entry-level cybersecurity certification pilot program will play a leading role in expanding the global cybersecurity workforce, creating new career opportunities and qualification pathways for individuals, and helping... Read more →

THE STAKES HAVE NEVER BEEN HIGHER: HOW TO EXPAND THE CYBER WORKFORCE

A recent Forbes article pulled together a list of several cybersecurity stats that underpin the current state of the industry and threat landscape. The stats, which come from various private sector organizations, highlight the dire need for more cybersecurity professionals to keep up with adversarial threats. Some of the most alarming stats include: Cybercriminals can penetrate 93% of company networks (Positive Technologies) Businesses suffered 50% more cyberattack attempts per week in 2021 (CheckPoint Software) The threat of ransomware attacks, data breaches or significant IT outages worries companies even more than business and supply chain disruption, natural disasters or the COVID-19... Read more →

REGISTER TODAY FOR THE (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

One week to go until the first (ISC)² entry-level cybersecurity pilot exam! Interested individuals can register for the pilot exam online through Pearson VUE. (ISC)² created the forthcoming entry-level cybersecurity certification to establish a clear new pathway for the next generation of professionals to pursue a rewarding career in cybersecurity. The new entry-level cybersecurity certification was also created to establish a recognized, global measure for skills verification, giving hiring managers confidence that prospective employees for entry- and junior-level cybersecurity roles have the required foundational knowledge, skills and abilities, along with an aptitude for on-the-job learning. The certification will play a... Read more →

TIME TO HIT THE BOOKS! TRAINING COURSE IS AVAILABLE FOR CANDIDATES PREPARING FOR THE NEW (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

To help candidates prepare for the forthcoming entry-level cybersecurity certification pilot exam, (ISC)² released a new education program—a live or on-demand expert instruction on the fundamental cybersecurity concepts and five domains covered by the certification. The five domains included in the pilot exam outline are: Security Principles Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts Access Controls Concepts Network Security Security Operations In preparation for taking the entry-level cybersecurity certification pilot exam, candidates can choose one of three live two-hour instructor-led review sessions taking place on January 25, 26 and 27. Each session will accommodate 40 students and... Read more →

No Excuses: Get Your (ISC)² Certification Done in 2022

The need is real. The shortage of cybersecurity talent presents a clear and present danger in virtually every corner of the globe as bad actors plot their next move. How wide is the gap? Recent research shows the cyber workforce must grow by 65 percent to adequately defend organizations’ critical assets.* No excuses — now is your time to commit to certification. Because a safe and secure cyber world can’t wait. (ISC)² is here to help, starting with your Exam Action Plan. Whether you’re pursuing CISSP, SSCP, CCSP, CAP, CSSLP, HCISPP or a CISSP Concentration, you’ll go into it prepared... Read more →

Help Shape The CSSLP Exam

(ISC)² regularly conducts Job Task Analysis (JTA) studies to review and update the content outline (or exam blueprint) of its credentialing examinations. A JTA is the methodical process used to determine tasks that are performed by credential holders and knowledge and skills required to perform those tasks successfully. Results of the JTA study link a candidate’s examination score directly to the domain knowledge being tested. A JTA Study Workshop for CSSLP has tentatively been scheduled in early February 2022. In preparation for the upcoming study, we would like to hear from our CSSLP members in good standing. Please comment on... Read more →

Decisions, Decisions and the Role of Authorization

Technology and cybersecurity cannot be thought of as the responsibility of a siloed IT department – it is the lifeblood of the organization. In day-to-day operations, as well as during moments of crisis, a company’s different functional areas must be able to collaborate and must know who to turn to for leadership. System authorization has been employed in government for over 20 years, and it is becoming recognized outside government for the promise it holds as a practical approach for identifying and documenting business requirements for security, for ensuring that cost-effective controls are functioning appropriately, and for ensuring that weaknesses... Read more →