Product professionals with (ISC)2 certifications?

[HNI9]

I am a product manager for a security software company and I'm considering taking the steps to earn CISSP certification. I'm interested to hear from other product managers about their experience earning (ISC)2 certifications, especially CISSP. 

Any commentary would be helpful, but some specific questions are:

• Has it helped in career advancement?
• Did the training and certification process help you learn more about your industry or customers of your products?
• Now that you're certified, are the resources available to members useful for you?
• Any other benefits that you've found particularly useful in your product career?

Thank you in advance for your feedback!

[rslade]

> HNI9 (Viewer) posted a new topic in Career on 01-05-2021 05:03 PM in the (ISC)²

> I am a product manager for a security software company and I'm considering
> taking the steps to earn CISSP certification.

One piece of advice: when you sit the exam, don't think that your product will
answer *any* of the questions on the exam.

One other point: early on when I first started doing seminars, I had a candidate
come in, and "strut" was the only way to describe how he came into the venue.
He was from a company that made security products, and he obviously felt that
this was going to be a cakewalk. He came to me at lunch on the second day,
looking rather shaken, and admitted that he had just phoned his office and asked
them to push his exam date back four months. This is probably the most
challenging exam you will ever write.

====================== (quote inserted randomly by Pegasus Mailer)
rslade@gmail.com rmslade@outlook.com rslade@computercrime.org
However it came about, like the triumph of Elias against the
priests of Baal, the undermining of belief in the traditional
gods was a devastating rout that shook more than confidence. It
led to the collapse of a whole philosophico-theological, moral
and social system. It would reduce to meaninglessness and
absurdity the panoply of beings, agents and factors that gave
sense and purpose to life. - Theophilus Okere
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413

[HNI9]

Good advice, thank you. I am glad to hear it is challenging because that makes it sound informative and useful! Any tips on being prepared? I was planning to take an (ISC)2 training course

Was the candidate you refer to from product development/management? I'm curious how they ended up faring.  

[rslade]

> HNI9 (Viewer) posted a new reply in Career on 01-07-2021 01:43 PM in the (ISC)²

> Good advice, thank you. I am glad to hear it is challenging because that makes
> it sound informative and useful! Any tips on being prepared?

Start off with reading "Security Engineering" by Ross Anderson.

Check out the sample questions (and discussion of question style and approaches)
at https://community.isc2.org/t5/Exams/CISSP-questions/m-p/18626

To fill in the gaps there are suggested references at
http://victoria.tc.ca/int-grps/books/techrev/mnbksccd.htm

>   Was the candidate you refer to from product
> development/management? I'm curious how they ended up faring.

I'm vaguely thinking sales or marketing. I don't recall hearing back from him
after the seminar ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@gmail.com rmslade@outlook.com rslade@computercrime.org
When a subject becomes totally obsolete we make it a required
course. - Peter Drucker
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413