topic Re: CISSP Employement Proof Documentation in Become A Member

CISSP Employement Proof Documentation

dandadynamite93 — Mon, 06 Jan 2020 16:00:47 GMT

Hello' I've submitted my endorsement application on Nov 27th. However, I don't think I've submitted sufficient proof of employment documentation. I have submitted an employment offer letter for 2 jobs, and a wage report/ W-2 for another. Is this sufficient documentation for the endorsement process? and if not, where would send W-2's/ paystubs for the other 2 jobs so the process won't take longer?

Re: CISSP Employement Proof Documentation

DHerrmann — Mon, 06 Jan 2020 18:24:32 GMT

When I've done an endorsement, I've always asked for a resume/CV. I treat it as a mini-job interview, even if I work with them, because I want to see proof of their experience and breadth across domains.

I consider the ethics of protecting the CISSP to be more important than being a "buddy".

Re: CISSP Employement Proof Documentation

ChrisStone — Mon, 06 Jan 2020 19:47:59 GMT

I submitted letters from my supervisor at two jobs, including basic statements as to when I was employed, the nature (full time), responsibilities, and the supervisors contact information. If you don't have at least minimimal versions of that information covered the reviewer will likely request more information. This doesn't put you at the bottom of the pile, if you turn the information around quickly the reviewer typically does as well.

That said, they're pretty backed up right now. I'd expect a reply around mid/end of January.

Re: CISSP Employement Proof Documentation

dandadynamite93 — Mon, 06 Jan 2020 20:20:23 GMT

i dont have an of that. Just my employement letter and W-2/paystubs

They dont call your old mangaers/supervisors to verify any of this stuff? It has to be documented?

Re: CISSP Employement Proof Documentation

DHerrmann — Mon, 06 Jan 2020 20:24:16 GMT

I always require complete documentation when I'm asked to endorse somebody, even if I know them.

By "complete", I want to see a resume, and I then sit down with the candidate to discuss their experience - both in terms of breadth (multiple domain experience) and duration (4 or 5 years full time depending on whether they have a relevant degree).

To me, it's vital to protect the integrity of the certification process. We can't have inexperienced people acquiring CISSP certs.

Re: CISSP Employement Proof Documentation

dandadynamite93 — Mon, 06 Jan 2020 20:55:06 GMT

I dont have an endorser, ISC2 is endorsing me

Re: CISSP Employement Proof Documentation

DHerrmann — Mon, 06 Jan 2020 21:25:55 GMT

I know - but the process is fundamentally the same.

Re: CISSP Employement Proof Documentation

Steve-Wilme — Tue, 07 Jan 2020 12:04:26 GMT

Have you considered that there are bogus CISSPs out there? There really are people putting CISSP or CISM on their resumes without holding the qualifications. And what can ISC2 or ISACA do about it; throw them out? Hmmm, they're not members anyway.

Re: CISSP Employement Proof Documentation

DHerrmann — Tue, 07 Jan 2020 14:08:11 GMT

I'd imagine that (ISC)2 could sue them, but it becomes a challenge in finding them and actually filing a lawsuit. Probably gets a lot tougher if they're in a nation that doesn't care about this type of fraud.

Re: CISSP Employement Proof Documentation

dandadynamite93 — Tue, 07 Jan 2020 14:58:43 GMT

So what I need answered is do you think an employment offer letter for 2 jobs and W-2/ wage reports for 1 is enough to proof that I held a job for a certain amount of time? Or is ISC2 super particular about verifying whether or not you worked somewhere and will need more documentation? Because I can give them the W-2s /pay stubs for the other 2 jobs, if so

Re: CISSP Employement Proof Documentation

rslade — Tue, 07 Jan 2020 19:56:20 GMT

> Steve-Wilme (Contributor III) posted a new reply in Certifications on 01-07-2020

> Have you considered that there are bogus CISSPs out there? There really are
> people putting CISSP or CISM on their resumes without holding the
> qualifications.

But ... but ... that's against the code of ethics!

Oh ... wait ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Freedom is the right to be wrong, not the right to do wrong
- John George Diefenbaker
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: CISSP Employement Proof Documentation

DHerrmann — Tue, 07 Jan 2020 20:12:06 GMT

Only (ISC)2 can answer your questions, but if I were endorsing you, I'd want to see your resume/CV. It should demonstrate work in the required breadth of CISSP domains for the required time period.

Re: CISSP Employement Proof Documentation

AlecTrevelyan — Tue, 07 Jan 2020 20:39:25 GMT

@dandadynamite93 wrote:
So what I need answered is do you think an employment offer letter for 2 jobs and W-2/ wage reports for 1 is enough to proof that I held a job for a certain amount of time? Or is ISC2 super particular about verifying whether or not you worked somewhere and will need more documentation? Because I can give them the W-2s /pay stubs for the other 2 jobs, if so

All the answers you seek can be found in your own thread!

https://community.isc2.org/t5/Certifications/CISSP-Endorsement/m-p/30201

From what you've written above, when compared with the information in Amanda's post, I'd say you haven't provided enough information.

However, when your application is reviewed ISC2 will contact you if they feel they need more information.

Re: CISSP Employement Proof Documentation

DHerrmann — Tue, 07 Jan 2020 20:48:37 GMT

@dandadynamite93 - It appears that you may be better off becoming an Associate of (ISC)2 at this time until you have at least 5 years experience in at least two of the eight CISSP domains. Remember - to achieve a CISSP certification, a candidate must pass the test AND have the requisite experience.

Have you reviewed the CISSP requirements: "Candidates must have a minimum of five years cumulative paid work experience in two or more of the eight domains of the CISSP CBK. Earning a four-year college degree or regional equivalent or an additional credential from the (ISC)² approved list will satisfy one year of the required experience. Education credit will only satisfy one year of experience.

A candidate who doesn’t have the required experience to become a CISSP may become an Associate of (ISC)² by successfully passing the CISSP examination. The Associate of (ISC)² will then have six years to earn the five years required experience."

https://www.isc2.org/Certifications/CISSP/experience-requirements

Re: CISSP Employement Proof Documentation

DHerrmann — Wed, 08 Jan 2020 19:45:46 GMT

By the way, there is NO shame in holding an Associate credential! I think it's a significant accomplishment and demonstrates your commitment to the profession.

A colleague sat for the CISSP test and passed. Three years later he submitted his 5 years of on-the-job experience, and quickly received his CISSP certification. He's been very successful, knows the job extremely well, and enjoys his job.