CISSP is NOT Entry Level

I've seen quite a few times people recommending the CISSP as an entry level security certification. I have some thoughts on this.

----------
————
————
————
Thank you for visiting my YouTube channel.

[rtbeer]

I passed the CISSP test yesterday. I have 30 years of IT experience and 15 years doing cyber/security architecture. I studied two hours a day, every day, for a month. When the test told me it was over, I thought i failed. That's how hard that test is.

[danieljermynpcfl]

Quick thing to note, if you pass at an associate level, you cannot call yourself an "associate CISSP." The only verbiage allowed by ISC2 is to call yourself an "Associate of (ISC)2" using the verbiage "CISSP" anywhere is a violation of their ethics. I was an associate for two years after passing and called ISC2 to verify this.

[jacquelinepresley]

I have over 10 years in IT such as help desk, network admin, software trainer and now a system's librarian. Going for another masters in Cyber security.
So I think that the CISSP would be great for me.

[goodjob]

I has some IT experience but cissp helped me get a much better understanding. I fulfill my experience criteria in a month.

[konradw]

So the CISSP is skewed as being a high paying certification since it requires experience aka. people further into their careers who will naturally earn more

[chrisredfield]

I have net+ sec+ ccna CEH and cissp is my next cert, wish me luck boys.

[ndletterofva]

Blanket statements rarely are 100% true (irony maybe). It depends on what your career goals are. Let's compare apples to apples. Candidate 1 has no experience and a CompTIA Sec+, Candidate 2 has no experience and an "Associate of ISC2". A hiring manager (or recruiter) should know the difference between the difficulty of the CISSP and Sec+ exams. They will either look at Candidate 2 as more qualified for the entry Cyber position, or at the very least the same.


Also Associate of ISC2 is IAT level lll (and IAM level ll) while Sec+ is IAT level ll (and IAM level l). So Candidate 2 to will contractually be more qualified for a higher number of positions. Mostly technical guys/gals look down on "senior level" certs (or certs in general) owned by newbies. We (yes I'm technical) aren't the ones hiring Cyber professionals. Senior Management / HR / PMs are in the business of interviewing these candidates. Last time I checked, these are the same group of people who are easily woo'd by degrees and certifications.


There is a well ridden path of knocking out the Sec+ then studying for your CISSP exam. You would still be a newbie, but you would have the crossover knowledge to help speed up your preparation.


If you want to do Cyber (non technical career), my advice would be to get your Sec+, then immediately start working on your Associate of ISC2 certification. You will stand out of the newbie crowd and don't forget the resume-search-engine magic of adding the "CISSP training" to your resume. You will get more hits, while not lying about what you achieved. CISSP training = Associate of ISC2 certification.


Good luck.

[peterream]

Getting your CISSP is like getting a CCNP.. NOT for beginners. Start with the Security+.

[evilbumblebee]

I have a seat in a CISSP class next month... after Net+, Sec+ as well as 20 years in the navy in IT and cyber-sec this to me is the cherry on the top of a career where ive basically watched security evolve over the last 20 odd years...

[JonGoodCyber]

Good stuff...what people don't always realize is that the CISSP is meant for senior level practitioners and management, not entry level employees. Even experienced people sometimes have trouble with the exam because you have to rely on your experience and judgement...the answers aren't always technology like a Cisco or some technical exam.

On the Associate designation, you actually get awarded "Associate of ISC2." You won't get anything that says you are a CISSP until you have the experience and get approved...because you aren't a CISSP until that point.

[ahrisho]

Misinformation given in this video. There is no "Associate CISSP" certification. ISC2 does not want to discredit the CISSP name. If you take the CISSP or any ISC2 exam for that matter without the experience requirement you'll receive the "Associate of ISC2" title. You can't claim that you have CISSP until you fufill the experience requirement and typically youll need to be endorsed by another active ISC2 member (there are ways around that). You can only claim to have passed the exam but you claim you have a CISSP.

[pulpted]

This is why while I’m studying for my CISSP, I’m also taking courses and looking at other routes to get expertise. I have digital media management experience. I have a CISO helping me. In other words, I’m jumping in for a stable job with EVERYTHING.l (CISSP, cyber security classes, and other experiences (job, paid internship, etc)

[davetke]

I started my IT career in 2013 and was eager to get the CISSP right away with no experience and failed miserably. I tried over and over again (I will not get into how many times I tried, it was alot!!) until a few days ago I finally passed. I will tell you guys this test if not entry level, it is based off of experience and how well you retain the information. I feel relieved that I passed but I know I have alot more work to do in regards in getting an endorsement and going through the vetting process. My biggest piece of advice in earning this certification is simple, just study and comprehend the material. There is no magic wand or short cut, you just have to dedicate yourself into studying the material.

[frodobe_tbaggin]

Who in the right mind thought CISSP is an entry level cert????

[Darnel]

If it wasn't designed as you're saying for people without experience why (ISC)2 allows people without work experience to take the test? people have to understand that work experience isn't always working for someone. I strongly believe if someone without the work experience can study and pass the CISSP exam he/she should do it; now having studied all the material covered in the CBK, he/she will understand things better in the work environment; he/she will understand why the compagny's policy in general and security policy in particular should be respected as stated (some people have a hard time to abide by that and find it cumbersome probably because they don't understand how important it's)

[jlprescott]

Extremely helpful advice. Been in IT for over 18-years and currently working. I was able to work my up the corporate ladder to land a managerial type position. Looking to get into cybersecurity and cloud by completing some certs. I’m preparing for Security+ and looking at the AZ900/AZ500 or maybe the CISSP next. Cheers!

[ruizroy]

all i gotta say is that: as your first cert or not too much experience, if you study and pass and actually land a job with it, don't feel scared there will always be training and there's a system already set for you to follow and jobs are not as ACTIVE as you might think your job is just going to be a series of clicks, just follow what the seniors tell you.

[charlesgarrett]

Get a SSCP then take the CISSP when you have the Exp.

I’ve seen people hired with an associate ISC2 so it depends on the candidate.

Btw I took it and passed it on the first try and have over 5 years experience.

[iammao]

It is 5 years not 6 years, and that can be down to 4 if you have one of the professional certificates listed on their website, or a 4 years bachelor's degree.

[bouquetchocolatesandconfec]

“SOLAR WIND” logo on your hoodie after the ongoing huge hack, funny while speaking about security. Thank You I am very interested in going onto the security field you gave me awsome advice Thank You