topic Re: Advise on CSSP eligibility in Exam Preparation

Advise on CSSP eligibility

shahid737 — Fri, 03 Nov 2023 10:08:46 GMT

I am not sure if there is way to get advise on CSSP eligibility. could anyone help me in this regard based on my profile below:

Achieved Certification in 2023:

1- (CEH) EC-Council certified hacker
2- (BTL1) Blue Team Level 1 Certification
3- (CC) ISC2 Certification in Cyber Security

Education:
Specialist diploma in Information Technology and Forensics (2023)
Bachelor in Computer Science - 4 Years (2004)

Work Experience:
NO experience in cyber security but 15 year working experience in IT Service delivery

I would really appreciate one can provide an advise How i can take CCSP from here.
Thank you

Re: Advise on CSSP eligibility

Early_Adopter — Fri, 03 Nov 2023 16:40:38 GMT

Bottom Line Up Front: Sit down with a dear, trusted CCSP certified friend and go through you last ten years of experience, investigating your IT Service delivery tasks and mapping your experience to the CCSP domains.

IT has a lot of information security in it - design Active Directory for five years —- what about all that RBAC? Security groups within security groups? Ran an E-Policy Orchestration Server? Squashing virus infections and getting angry at McAfee(Trellix) when it didn’t work? Scoped the traceable requirements for a software project? Did it have security requirements? Managed a patching strategy prioritising CVEs? Telling the vendors update your OSS components please rather than giving me excuses as to why you’re not vulnerable… I have to track them you know - and hang on what do you mean you’re not …”generally” vulnerable…? You’ll need to analyse your tasks and see what your friend thinks is admissible.

The current guidance is clear as mud - but you need 5 years IT experience, of which 3 years must be in “information security” and one year in one of the six CCSP domains.

Bottom line down below is your CS degree counts a year, the other certificate you might consider is CSAs CCSK which counts a year and you then need a years experience in one domain of the CCSP.

https://www.isc2.org/certifications/ccsp/ccsp-certification-exam-outline
https://www.isc2.org/certifications/ccsp/ccsp-experience-requirements

Re: Advise on CSSP eligibility

shahid737 — Sat, 04 Nov 2023 12:41:20 GMT

Honestly your reply was an eye-opener for me. I didn't realized that I'd been doing a lot of Security stuff without me knowing. Implementation of 802.1x, MDM, ClearPass, incident handling, Digital signature, encryption, spam control and monitoring, Key Escrow, Account and access management, and list just go on and on...

Thank you so much for giving me a direction.
You are really a "Community Champion"

Re: Advise on CSSP eligibility

Early_Adopter — Sat, 04 Nov 2023 22:14:57 GMT

NP, it’s a pleasure to be able to help out. Best of luck with the CCSP.