topic Re: Is a Masters Degree necessary after earning CISSP? in Career Discussions

Is a Masters Degree necessary after earning CISSP?

cindelicato — Mon, 09 Oct 2023 08:57:14 GMT

I have reviewed a few Masters Degree programs from online universities, and have noted the frequent benefit listed is prepping for CISSP.

Does this mean holders of a CISSP have already accomplished what (at least) some Masters programs provide?

Re: Is a Masters Degree necessary after earning CISSP?

kimberdray — Sun, 23 Sep 2018 18:15:22 GMT

Hi,

I would not directly associate a Masters program with CISSP. This ISC2 page is a good resource for information specific to earning a CISSP:

https://www.isc2.org/Certifications/CISSP

Have a look at the "Who Earns the CISSP Certification?" section.

Qualifying and successfully completing this certification is based on your verified and endorsed experience and knowledge across all of the CISSP domains.

There are many career paths that lead to this certification.

Kimber

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Sun, 23 Sep 2018 15:36:50 GMT

Kimber,

I believe I haven't been clear. I have already earned my CISSP, and was looking into earning a Masters Degree, but found more than a few programs that seemed to prepare students for the CISSP. So I am asking whether a Masters is even worth pursuing if I already have a CISSP.

Thanks for the response.

Re: Is a Masters Degree necessary after earning CISSP?

kimberdray — Sun, 23 Sep 2018 16:30:22 GMT

The requirement for a Masters is specific to the job role you are seeking and the industry you are in.

I know that's not a great answer but if I consider all of the information security professionals that I know and even the job descriptions in this industry, I am not seeing this as a requirement or even an increased likelihood of employment.

There are many industries that would put higher emphasis on say an MBA/MPA for any senior leadership positions with managerial roles. You may even find some salary grids that directly correlate to the addition of a Masters.

I do suggest that this is evolving as the industry attempts to sort out some questions about standardization of qualifications.

If your career experience has been more technical in nature and less business/soft skill developed then perhaps a Masters would be appropriate.

With the rising emphasis and need for CISO/CIOs role to have direct communications with Executive Boards on topics related to cybersecurity, risk, etc. managerial experience complimented with a Masters would likely enhance any information security training, experience and certification that you have.

It's my personal opinion that practical experience, coaching and mentorships are the better value for success in these areas.

Re: Is a Masters Degree necessary after earning CISSP?

kimberdray — Sun, 23 Sep 2018 16:28:41 GMT

There is another thread here focusing on the availability and choice of Masters programs as well: https://community.isc2.org/t5/Career/Good-and-suitable-Cyber-security-masters-degree-online/m-p/8747#M721

Re: Is a Masters Degree necessary after earning CISSP?

Daniel-Nash1 — Sun, 23 Sep 2018 16:44:53 GMT

I earned my second masters in Information Assurance/Security before earning my CISSP. Accredited programs help in experience toward your certification along with the experience of doing relevant research in the field. I would say the experience helped - though I also practice and teach IT security for networking and computer science professionals.

I don't see earning a Masters degree as essential to getting certified, though I believe it will help your career overall.

Re: Is a Masters Degree necessary after earning CISSP?

kimberdray — Sun, 23 Sep 2018 18:50:00 GMT

Tough to statistical show what percentage of CISSP may apply to a Masters but from some of those programs I have reviewed, it appears as if the CISSP cert. may be a challenge equivalent for 1-2 course components of a full Masters course load. Of course, that would also depend on which Masters you choose.

Re: Is a Masters Degree necessary after earning CISSP?

ro83 — Sun, 23 Sep 2018 18:50:24 GMT

I am preparing for my CISSP exam and also I started my master studies this year. HCI masters program is not directly related to security so it is not helpful for passing CISSP exam, but it provide much wider knowledge about technology and society in general. I see this combo as a synergy. If masters program is defined as preparation for an exam and you already have the certificate then it looks like running in the lower league for me. I would recommend more challenging masters studies for you in this situation.

Re: Is a Masters Degree necessary after earning CISSP?

Matthew_Stiles — Sun, 23 Sep 2018 19:10:51 GMT

From my experience and discussions with HR personnel, a Bachelor's degree is generally considered the minimum for management-level positions. I have an Associate degree and my CISSP, and they said that the latter counts highly in terms of eligibility for technical positions (on part with a BS) but wouldn't suffice for management. However, HR didn't mention any higher-level degrees (Master's or higher) or how that weighs for a position.

I'd say if you're interested in pursuing senior management positions (especially executive level), a Master's might be something to consider just to help show an "well-rounded" background and familiarity across multiple aspects of both security and business.

Re: Is a Masters Degree necessary after earning CISSP?

Caute_cautim — Sun, 23 Sep 2018 20:09:24 GMT

Depending on your career aspirations, as one colleague has stated a Bachelor is the minimum standard required for many graduate or under graduates within my own organisation. From my own experience, of doing an MSc, Whereas a Bachelor's degree had a structured approach, and studying was related text books, particular principles - I did a BA via the Open University the hard way, because I was traveling frequently. I found the MSc level was challenging, and it really made me think, and learn how to structure arguments effectively, especially when the readership was my own management within my organisation. In a sense, the CISSP is an artificial world, to ensure you know how to apply the principles to your everyday activities, very structured, but you still have to apply your own experience to complete it. Whereas a higher degree, teaches you to carry out research, make decisions based on the information being gathered, the source and whether there was an inherent bias within it. You then applied that learning directly to your own thinking, in a structured manner and argued ones cases whether it was for a particular case or against it. You had to validate and structure ones arguments and stand behind them and apply that learning to every day activities, it was certainly for me a period of self development, and vast learning experience.

As long as you have work, life and balance, you can achieve many things - but don't neglect those around you, as you become more and more focused on the MSc experience, especially on the final thesis etc.

Regards

Caute_cautim

Re: Is a Masters Degree necessary after earning CISSP?

Harlekwin — Sun, 23 Sep 2018 20:44:17 GMT

Hi Charles,

The simple answer (IMHO) is “no” but it will perhaps mark you out in a crowd.
However, what you get out of a Masters is entirely up to you. Also, like any qualification it is up to YOU what you make of it.

One of the greatest values is being exposed to a world that few of us have experienced for many years, perhaps decades, perhaps even never before: academia. That experience will put you in good stead and drive new ways of problem solving or analysis.

Level 7 (UK) courses, like Masteers Degrees, very specifically require the student to the vast amount of work. You’ll be given some directed reading and such but you’ll need to research and learn topics on your own, almost unaided.

An extreme technician may find academia stifling or annoying. Academia often lags significantly behind industry standards and dramatically behind current threats. But that does not make it worthless by any means.

If you choose to do a Masters-by-research then that is a different beast (for which I cannot comment). But in a taught-Masters the real pleasure comes from your choice of final project, your dissertation, and your final defence. Get this right and you’ll carry it with you with immense pride.

One final note. You absolutely need to have the backing of your family, friends and employer (especially your employer). Unless you are fortunate enough to be able to do a Masters full time the demands are extreme - often significantly more demanding than you job. I found myself taking holidays and so forth to get the research and write ups and so forth completed.

BUT (to repeat) - the pleasure and reward of getting the project, dissertation, and final defence nailed is immense. Get this right and it is something you can justifiably be proud of in the years to come.

And also, the CPE benefits should not be discounted.

My very path has been CEH >> Security+ >< CISSP >> MSc. Made sense to me.

Enjoy and good luck, Charles, whatever you choose to do.
—Nigel

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Sun, 23 Sep 2018 21:18:56 GMT

Thank you, Kimber; your posts have brought me necessary clarity.

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Sun, 23 Sep 2018 21:20:56 GMT

Thanks, Newcomer.

I think you are absolutely correct; I did a cursory search of Masters programs and found more than a few that focused on the CISSP, so I lept to my conclusion.

I have no plans at this stage of my life/career to pursue a Masters, but I appreciate your input.

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Sun, 23 Sep 2018 21:21:54 GMT

Thanks Matthew, I will certainly consider your input if I do pursue a Masters.

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Sun, 23 Sep 2018 21:23:41 GMT

Caute,

Thank you for your detailed description of a Masters program.

It is certainly food for thought.

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Sun, 23 Sep 2018 21:26:02 GMT

Nigel,

Your response is compelling, indeed; at this point in my life/career I do not believe I will pursue a Masters anytime soon. But if that ever changes, I will revisit this post (already saved to my cloud storage) before I pull the trigger.

Thank you

Re: Is a Masters Degree necessary after earning CISSP?

rslade — Mon, 24 Sep 2018 22:41:51 GMT

> cindelicato (Newcomer II) posted a new topic in Career on 09-23-2018 11:14 AM in

> I have reviewed a few Masters Degree programs from online universities, and have
> noted the frequent benefit listed is prepping for CISSP.

Since ISC2 has done such a good job of putting together a comprehensive CBK, a lot of courses and degree programs use it to structure their syllabus or curriculum. Thus, taking a program that does cover the CBK means you should be prepared (aside from the experience requirement).

> Does this mean
> holders of a CISSP have already accomplished what (at least) some Masters
> programs provide?

It's possibly going a bit too far to say that, but, partly. It will (or should) broaden your horizons (as should a good university program).

Re: Is a Masters Degree necessary after earning CISSP?

CraginS — Wed, 26 Sep 2018 00:26:42 GMT

@cindelicato wrote:
I have reviewed a few Masters Degree programs from online universities, and have noted the frequent benefit listed is prepping for CISSP.

Charles,

No, a master's degree is not a specific requirement after attaining a CISSP. However, there may be other career development reasons to pursue such a degree.

First, if you read the program and course descriptions of the many master's degree programs in information security, information assurance, or cybersecurity, you will notice that many of them are designed to help folks with no security experience shift their careers into the infosec realm. If you have earned your CISSP, you are already there.

As Grandpa @rslade pointed out, using the complete CBK domain set to design a grad program curriculum is a darn good way to cover all the bases. Consider that a five or six day cram course can prep you for the exam. Now think about how deep your learning will be in a program that devotes a full semester course to each domain. If a student had not been ready for the exam before the program, that student should be quite ready after completing all the courses.

Next, many experienced infosec workers who have had a CISSP for years do go back and complete one of those infosec master's degrees. I have a good friend and colleague who did so just a few years ago. The advantage of that sequence is that someone with deep knowledge in only a few of the domains will leave the degree in hand and aa much more complete understanding of the breadth of the infosec world. That person is much more ready to move into the security management positions (wanna be a CISO someday?) than the world's best hacker or pen tster or OS hardener.

Oh, and all of those course hours count as CPE hours! You should have seen how many CPE units I claimed during my three years of infosec grad school.

Good luck on planning the right development progra for yourself in our field.

Re: Is a Masters Degree necessary after earning CISSP?

CISOScott — Mon, 01 Oct 2018 13:17:19 GMT

They both have separate objectives.

CISSP shows knowledge of a wide range of information related to Cyber Security.

A Masters degree is supposed to help you understand more than cyber security.

To me the CISSP helped me understand how to explain my craft, the Master's helped me explain it in business terms the C-suite would understand.

If you have any desires to get into the C-Suite (CISO, CIO, etc.) I would advise taking a Master's course.

Re: Is a Masters Degree necessary after earning CISSP?

cindelicato — Mon, 01 Oct 2018 14:53:15 GMT

Dr. Shelton,

Thank you for your insight; I will keep it in mind for my future endeavors.