@Mshofique wrote: "Additionally, based on what I have been told, you need to part of a particular company for 10 years before you can take the CISSP exam."
YOU HAVE BEEN MISINFORMED!!!
The experience requirements are clearly stated on the website:
"have at least five years of cumulative, paid work experience in two or more of the eight domains of the ISC2 CISSP Exam Outline."
NOTHING about being in the same company for 10 years!!
The 8 domains are:
Domain 1. Security and Risk Management
Domain 2. Asset Security
Domain 3. Security Architecture and Engineering
Domain 4. Communication and Network Security
Domain 5. Identity and Access Management (IAM)
Domain 6. Security Assessment and Testing
Domain 7. Security Operations
Domain 8. Software Development Security
Several of these are domains that people who aren't necessarily cybersecurity professionals are doing. As a sysadmin I was doing several of them (asset security, IAM, security assessment & testing, etc.
---
Michael Brown, CISSP, HCISPP, CISA, CISM, CGEIT, CRISC, CDPSE, GSLC, GSTRT, GLEG, GSNA, CIST, CIGE, ISSA Fellow
