topic Re: CISSP Associate or CISSP in Member Support

CISSP Associate or CISSP

Cyberman6877 — Thu, 18 Jan 2018 03:50:15 GMT

Hi,

I am a Senior Oracle DBA with 10+ years of experience in multiple Sectors including Telecommunications, Retail and Insurance. I have decided recently to fully transition into Security and currently studying for the CISSP exam. My question is, when I tried to book the exam earlier, I was faced with a question to whether I want to take the Associate route or if I have experience in two of the domains. Now as a Senior DBA, Security was a significant part my every day work, so I have covered Access control, encryption, patching, dealing with vulnerabilities, etc. from the Database Security prospective. My last role was a Database Security Manager responsible for the security of several database technologies and worked exclusively on patching, Policy and Vulnerability compliance. I implemented TDE (Transparent Data Encryption across all databases) and worked on SIEM products such as Arcsight.

I have all the paperwork from HR to prove my years of experiences but I do not know anyone who has CISSP who can vouch for me. So which route do I follow? I feel the Associate route is more designed for graduates with no experience but I am happy for you to correct me if my understanding is incorrect.

I appreciate any help you can offer with this!

Sincerely,

Cyberman6877

Re: CISSP Associate or CISSP

Deyan — Thu, 18 Jan 2018 07:00:06 GMT

Hey,

If you feel mature and have 5 years experience in 2 of the domains from the CISSP - I do not see a reason for you to not go directly for it. Prepare to provide details about how have you fulfilled the 2 domains for the last 5 years and if all is ok - CISSP should be the one for you.

Re: CISSP Associate or CISSP

esilvalabh — Thu, 18 Jan 2018 09:50:06 GMT

Hi,

After pass the exam, associate designation option is used when you haven't security experience in two domains required, and you have 6 years to gain experience in two domains to request the certification. The other option is used to pursuing the certification in a period of 9 months after pass the exam. However, if you don't feel confident to go for the second option, you should go directly to associate until you can clarify whether you cover two domains in the CISSP certification.

Regards.

Re: CISSP Associate or CISSP

skyflier21 — Thu, 18 Jan 2018 10:11:07 GMT

Hi,

Like you I did not know anyone who already had the CISSP who could vouch for me. I took the exam and when looking for the endorsement after passing you have two options, 1 being t have a CISSP to vouch for you, the other is to submit the information to (ISC)2 and they check it over for you.

I did the second option and am pleased to say they verified the evidence and I am now certified.

Good luck

Re: CISSP Associate or CISSP

laurynasziedas — Thu, 18 Jan 2018 10:29:45 GMT

Hello,

As You have all the papers needed, why stop at Associate level? As You already noticed, it is oriented towards younger IT specialists who are seeking certification but lack experience.

In Your case You can choose (ISC)2 to review and endorse Your work experience. Anyway You'll get Associate level until Your application will be reviewed 🙂

Re: CISSP Associate or CISSP

amandavanceISC2 — Thu, 18 Jan 2018 14:17:30 GMT

@Cyberman6877 Thank you for your inquiry. You are correct, the Associate of (ISC)² status is there for individuals who have passed an (ISC)² exam but do not have the required work experience to hold the certification at that time. The Associate of (ISC)² working towards CISSP status will provide individuals with 6 years to obtain the 5 year requirement in 2 of the 8 domains. As long as you have at least 5 years of full-time, paid work experience in at least 2 of the 8 domains, you will be eligible to submit your endorsement for full certification.

If you do not know an (ISC)² member in good standing that will act as your endorser, when completing the endorsement application, you would check the assistance application, where (ISC)² acts are your endorser. The application is the same as the normal endorsement, however, you will be required to submit the proof of employment for (ISC)² to validate.

Please feel free to reach out to me directly at any time.

Best Regards,

Amanda Vance

avance@isc2.org

Re: CISSP Associate or CISSP

Arne — Thu, 18 Jan 2018 13:55:36 GMT

I think you have enough experience to apply for the CISSP.

In my optinion, you surely covered more than two domains with

your listed work experience.

So, just pass the exam and then apply for the CISSP.

If you do not know any other CISSP for the needed endorsement,

here is the note from https://www.isc2.org/endorsement:

Notes:

If you do not know an (ISC)²-certified professional, you may request (ISC)² to endorse your application.

Re: CISSP Associate or CISSP

Cyberman6877 — Fri, 19 Jan 2018 23:20:06 GMT

Hi Amanda,

Sorry for the late reply and thank you very much for your help.

One final question if I may. Can I choose the associate route, take the exam (pass it hopefully) and then fill out the necessary forms for experience validation while my status is set to associate?

Many thanks again!

Sincerely,

cyberman6877

Re: CISSP Associate or CISSP

amandavanceISC2 — Mon, 22 Jan 2018 13:37:11 GMT

@Cyberman6877 It is my pleasure! Yes, you may absolutely register for the Associate of (ISC)² status prior to taking the exam (this is done during the exam registration process). Once you pass the exam, you will automatically become an Associate and will still be able to submit your endorsement application for review. Once your endorsement has been reviewed and passed, our endorsement team will clear your Associate of (ISC)² status and make you a full CISSP.

Best Regards,

Amanda Vance

Re: CISSP Associate or CISSP

sofitapaul — Tue, 01 May 2018 14:28:50 GMT

Cyberman6877

I truly recommend you to go with CISSP if you are confident. Or you can attempt CCSP followed by CISSP exam. This can help you to get complete understanding on cyber security practice while your career.

2 certification can boost your credit and later you can select the ultimate specialized certification like CISSP Concentrations - Architecture or CISSP Concentrations - Management. I prefer to go with official certification books and lots of practice of CCSP or CISSP online mock test like edusum and other open mock test providers.

Have a least 2 CISSP books and take regular assessments to see how well you're understanding the material.

My journey to the CCSP was different than most. I had been working hands-on in/with the Public Cloud space for a number of years prior to the CCSP. My primary reference for preparing for the exam was the ISC2 CCSP CBK and practice with almost 2000 plus questions with edusum mock tests

Re: CISSP Associate or CISSP

Cyberman6877 — Tue, 24 Apr 2018 02:00:38 GMT

Hi Amanda,

I hope you are well!

I am happy to report that I have successfully passed the CISSP exam last week and I have received an email today from the ISC2 requesting me to fill in the endorsement form.

I have all the necessary references from HR from my previous roles but I do not know any (ISC)² CISSP member that can act as my endorser. Can I ask (ISC)² to act as my endorser? What information do I need to provide? The references I have from HR from my previous roles only indicate the title of my role and the duration of employment and do not go into specifics. Will that be sufficient? I am also happy to provide the contact details of my previous managers if required.

Can you please confirm?

Many thanks for your help!

Sincerely,

Cyberman6877

Re: CISSP Associate or CISSP

amandavanceISC2 — Wed, 25 Apr 2018 20:46:25 GMT

@Cyberman6877 Thank you for reaching out! If you do not know an (ISC)² member in good standing that can act as your endorser, you may request for (ISC)² to act as your endorser. When you request the assistance application, you will need to provide proof of employment.

Proof of Employment:

Letter on company letterhead with job title and dates of employment (does not have to have description)
W2 - 1 W2 for each year worked at the company, plus one extra
Pay stubs - 3 for each year worked at the company (beginning, middle and end)
Offer/Termination letter combination

Best Regards,

Amanda Vance