Author Interview: Michael Gregg

Page 1 of 2     1  2 

The CISSP has become the gold standard of security certification. Find out what you need to know to earn it for yourself.

Published 10/13/2005
By Anne Martinez

The CISSP (Certified Information Systems Security Professional) certification is a tough, well respected credential that shines on any resume. Earning it is challenging, but very rewarding.. We asked Author Michael Gregg just what it takes to earn the coveted CISSP title.

CISSP Exam Cram 2 by Michael Gregg Buy it now

GoCertify: What is the CISSP and who is it for?

Michael Gregg: CISSP stands for Certified Information Systems Security Professional. It is considered one of the premiere security certifications. It is vendor-neutral and is governed by the International Information Systems Security Certification Consortium (ISC2).

GoCertify: How is it earned (including costs)?

Michael Gregg: The exam itself will cost you around $500 dollars. Most individuals will feel the need to buy a variety of books, start a program of self-study, or attend some type of training to be fully prepared for the exam. The costs can range from a few hundred dollars to $5,000, to $7,500 dollars if you include boot camps, and time away from work, meals and lodging.

GoCertify: Do employers specifically look for CISSP?

Michael Gregg: Yes, the CISSP has become the gold standard of security certifications. Many job openings ask for it while others require it.

GoCertify: What kinds of jobs would someone with CISSP certification qualify for?

Michael Gregg: Good question, last time I looked on Monster.com there were more than 1,000 jobs listed where employers wanted candidates to have a CISSP. Some of those jobs included: Senior Security Architects, IT Risk and Control Professionals, IT Auditors, Network Security Administrators, and Director of Information Security. With the required experience needed to obtain a CISSP certification and the certification itself job candidates with the proper skill set would qualify for these types of jobs.

GoCertify: How much on the job experience is needed before someone should consider pursuing CISSP?

Michael Gregg: Earning a CISSP certification first requires four years of security related business experience or three years of experience plus a college degree or two years plus a Bachelor's Degree and a Master's Degree in Information Security.

GoCertify: What are the main domains covered on the CISSP exam?

Michael Gregg: The CISSP exam tests the candidate's knowledge of subjects covered in the ten Common Body of Knowledge (CBK) domains. These ten domains cover the following:

• Access Control Systems and Methodology
• Application and Systems
• Development Security
• Business Continuity and Disaster Recovery Planning
• Cryptography
• Law, Investigations, and Ethics
• Operations Security
• Physical Security
• Security Architecture and Models
• Security Management Practices
• Telecommunications and Networking Security

Page 1 of 2     1  2