CISSP.

A senior-level vendor-neutral security certification from ISC2 covering eight domains of the Common Body of Knowledge and requiring five years of paid work experience. It belongs to the Compliance & Frameworks category of cybersecurity.

A senior-level vendor-neutral security certification from ISC2 covering eight domains of the Common Body of Knowledge and requiring five years of paid work experience.

The Certified Information Systems Security Professional (CISSP) is issued by ISC2 and is widely regarded as the benchmark certification for experienced information security practitioners, managers, and architects. The exam covers eight Common Body of Knowledge (CBK) domains: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, and Software Development Security. Candidates take a Computerized Adaptive Test (CAT) of 100 to 150 questions over up to three hours. CISSP requires five years of cumulative paid work experience across at least two CBK domains and an endorsement from an existing certified professional.

Defences for CISSP typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Certified Information Systems Security Professional.