Let me try to answer some of your answers.
* As I understand, you just need to submit an application to become fully certified. There is no re-test. This is the whole purpose of the Associate status. You have 9 months after taking the exam to apply for the certification. The Associate status "maintains" this pass until you can get the experience to apply.
* Look at the domains. You need to do work in 2(?) of them.
* You have to pay for the exam again. Not sure if its the same cost or a discount BUT you will have to wait a few months before retaking.
* Not sure how many CPEs are required for the CSSLP. That is given elsewhere. Its over a 3 year period now, no annual minimums. YES non-ISC2 activities count. You can go to industry conferences, take webinars from many sources, attend meetings with industry groups like ISSA. Not sure where this idea that only ISC2 activities count. For me, I've used my attendance at ISSA meetings for CPEs for years, plus as a board member of our chapter, I get group B. ISACA meetings also. Conference from ISSA, ISACA, various BSides also have counted. Webinars from ISSA, ISACA, elsewhere I've used.
Hope this helps.
---
Michael Brown, CISSP, HCISPP, CISA, CISM, CGEIT, CRISC, CDPSE, GSLC, GSTRT, GLEG, GSNA, CIST, CIGE, ISSA Fellow
