Inquiry About Job History Requirements for CISSP Credential

[Alparsalan]

Hi everyone,

Good morning!

I have been with the same company since 2003 and have recently passed the CISSP certification. Throughout my career here, I’ve held various roles, and I am currently the Security Team Leader, a position I’ve held since 2016. Previously, I served as the Network Team Leader.

In my current role, I focus on Domain 1 of the CISSP framework, while in my previous position, I focused on Domain 4.

I have a question regarding the job history requirements for the CISSP credential:

1. Do I need to create a separate job history record for each role I’ve held within the same company to meet the work experience requirements?
2. Is a single job experience letter sufficient to cover both roles, or do I need to request two separate letters from my HR department?

I appreciate any guidance or insights you can provide!

Thank you!

Alparsalan Khan

[nkeaton]

@Alparsalan What I always suggest to do is to print off the exam objectives (outline). Note your experience next to each. Then you can write your experience up from there and will find that you probably have more experience than you are thinking and can it up from there with more confidence. I wouldn’t break it down by domain or job role. I have a few ISC2 certifications and have done it that way. Of course everyone will do it their own way. I just type mine in, but others provide an attachment(s). Some follow strict resume format. The fact that you are asking probably means that you are thinking and will be fine.

Also congratulations.

[Alparsalan]

@nkeaton ,

Good Morning!

Thank you, and thank you for your suggestion! I will definitely consider printing off the exam objectives and noting my experiences next to each to provide a comprehensive overview for my application.

Is it acceptable to mention more than two domains in the endorsement process? I have experience in additional domains as well. I have a query below and would appreciate your advice:

I have a CISSP endorser supporting my application, and I would like to know what documents are required to upload along with my resume. Is the resume sufficient, or do I need to include additional documents, such as proof of employment (experience letter)?

Additionally, here’s some context regarding my experience: I have been with the same company since 2003 and recently passed my CISSP certification. Throughout my career here, I’ve held various roles. I am currently the Security Team Leader, a position I’ve held since 2016, and I previously served as the

Network Team Leader.

In my current role, I focus on Domain 1 of the CISSP framework, while in my previous position, I focused on Domain 4.

Do I need to create a separate job history record for each role I’ve held within the same company to meet the work experience requirements for the CISSP credential?

Is a single job experience letter sufficient to cover both roles, or do I need to request two separate letters from my HR department?

Thank you!

[nkeaton]

@Alparsalan I would definitely include anything related to major duties. That could certainly be more than 2 domains. I never include a separate document. I type my experience directly into the endorsement which I take from my exam objectives notes. I encourage people to do that analysis as a first step to insure that they have the required experience going in. If your endorser works with you, they will have the best idea of your experience. Others may need more detail. I have the people that I endorse send it to me in an E-mail first in case I see any weaknesses and can talk with them before submission. Then when I get the notification, it is easier to go through. If they have endorsed others, they know how this works.

[dcontesti]

Your questions are best answered by someone on the management team as they know exactly what they want to see.

Try reaching out to Examadministration@isc2.org 

d

[Alparsalan]

Thank you!

[Alparsalan]

Thank you!

[emb021]

@Alparsalan what I did and what I recommend is to provide an edited version of your resume, noting what domains you did in each role, going back a sufficient amount of time.

Keep in mind that while at job X it may have mainly been part of a specific domain, you may realize that the work ALSO falls into other domains.

Also having someone who knows you and your work who can endorse you who is also an ISC2 member is important.

[Alparsalan]

Thank you for the advice!

[nkeaton]

@emb01 Definitely an ISC2 member in good standing is important and makes it much easier. I did run across something really weird helping someone. He finally passed his CISSP on his 5th try. I met him after his 3rd fail. I really admired his spirit but was not sure if he could master it. Someone at his work told him that would endorse him. He kept getting an error on submission (not sure exactly what now). I gave him the link to check members. He gave me a screenshot. The person was not only just an Associate of ISC2 but also had been for 5 years (can only carry for 6). I did explain the seriousness of this misrepresentation as a CISSP. What he gave me did not include the name or member number or would’ve turned them in to ISC2 I have a definite issue with Associates of ISC2 misrepresenting themselves as CISSPs. I am told is very common on LinkedIn. One bragged in these forums and said passed with no experience. He included his LinkedIn where he also claimed to be a CISSP. I looked at it and was another Associate of ISC2. I gave ISC2 the information as part of our code of ethics.