Inquiry About Job History Requirements for CISSP Credential

[Alparsalan]

Hi everyone,

Good morning!

I have been with the same company since 2003 and have recently passed the CISSP certification. Throughout my career here, I’ve held various roles, and I am currently the Security Team Leader, a position I’ve held since 2016. Previously, I served as the Network Team Leader.

In my current role, I focus on Domain 1 of the CISSP framework, while in my previous position, I focused on Domain 4.

I have a question regarding the job history requirements for the CISSP credential:

1. Do I need to create a separate job history record for each role I’ve held within the same company to meet the work experience requirements?
2. Is a single job experience letter sufficient to cover both roles, or do I need to request two separate letters from my HR department?

I appreciate any guidance or insights you can provide!

Thank you!

Alparsalan Khan

[nkeaton]

@Alparsalan I saw your question on social media as well. I did not repeat what I put here. It is nice that you are being thorough. I had reached out to ISC2 several years ago because I was interested in taking the HCISPP because I am not in healthcare but have a task that relates somewhat to PHI. I outlined my thoughts. I was told that they cannot decide that for me. I decided to pursue other certifications instead. Apparently it was a good choice since ISC2 decided to drop the certification. With my local CS chapters and other CS work, I know a lot of people in some aspect of healthcare and was very interested in knowing more. I do have the CBK and plan to read it at some point. I understand that it wasn’t necessarily profitable, but I thought was a great bridge for those in healthcare that wanted to understand it better or wanted to transition. If I can help you, I will. I have had to fill out for ISC2 endorsement 5 times (2 did not require endorsement at the time). Although audits are supposed to be random, I have never been subject to one. I did have someone that I endorsed come up for audit on his SSCP. Unlike me he submits it as an attachment in resume style. He definitely had the experience. About a month later he took his CISSP and passed. I endorsed him for that and was exactly the same resume submission. It passed no problem that time. Hope that all goes smoothly for you.

[emb021]

@nkeaton Yeah, that's a problem.  I've had to point out to many people that its "Associate of ISC2", NOT "Associate CISSP" or the like, and to be VERY carefully not to give the misimpression they have the CISSP, such as saying that passed the test to give the impression they have the cert.

Yes, other cert orgs have associate level for specific certs, but NOT ISC2.

[nkeaton]

@emb021 I have had to explain too many times that an Associate of ISC2 is only a membership and not a certification. You are so correct in the permutations that they will use on LinkedIn and other places to misrepresent themselves. The example of the endorser offer is so very blatant. I almost prefer what ISACA or PMI does. As you know ISACA will not even allow submission of the application until have the required experience. PMI makes a person prove the experience up front before gives permission to sit for the exam. Neither brings in as much money for those methods but is definitely a bit insulting to those of us who actually earned certification.

[emb021]

@nkeaton" "Associate of ISC2" is a membership, not a certification."

That's a better way of explaining it.  I'll have to remember that.

Am well aware of both ISACA and PMI's methods.  PMI also allows for an associate level for PMP, but I think you still have to have some experience.  At least with PMI, once you pass you got the cert automatically, but that's because you submitted everything before.  ISACA allows you get the experience 5-6 years after passing.

But I'm bothered by ISACA rolling out more certs of late.  We already got 3 AI related ones from them just in the last few months....  (and I'm an ISACA member)

[DJExamTeam]

Thank you for contacting the ISC2 Community Board.

learn more about CISSP experience requirements, your experience requirement is reviewed after you've passed your exam, and at time of endorsement, should you not have enough experience you would become an Associate of ISC2 https://www.isc2.org/certifications/associate

[nkeaton]

@emb021 It does change peoples’ perspectives when realize that it is just a membership, well, except those misrepresenting themselves. I help our folks on earning their PMPs (I work better in chaos apparently but respect project management) but was not aware of an option. I tell people that ask me that the CAPM is a good choice without the experience requirement. I can help them get certified but is definitely not my gig and not even on my long list. I am sure someone without experience would get frustrated with ISACA waiting to put in that application. Unfortunately the way that ISC2 does it, many more misrepresent themselves. I am grateful with the CC that it with the SSCP give a good path to the CISSP.

[DJExamTeam]

Thank you for contacting the ISC2 Community Board.

I've provided link to work experience requirments

https://www.isc2.org/certifications/cissp/cissp-experience-requirements

A candidate who doesn't have the required experience to become a CISSP may become an Associate of ISC2 by successfully passing the CISSP examination. The Associate of ISC2 will then have six years to earn the five years required experience.

Work Experience

Your work experience must fall within two or more of the eight domains of the ISC2 CISSP Exam Outline:

• Domain 1. Security and Risk Management
• Domain 2. Asset Security
• Domain 3. Security Architecture and Engineering
• Domain 4. Communication and Network Security
• Domain 5. Identity and Access Management (IAM)
• Domain 6. Security Assessment and Testing
• Domain 7. Security Operations
• Domain 8. Software Development Security

Full-Time Experience: Your work experience is accrued monthly. Thus, you must have worked a minimum of 35 hours/week for four weeks in order to accrue one month of work experience.

Part-Time Experience: Your part-time experience cannot be less than 20 hours a week and no more than 34 hours a week.

• 1040 hours of part-time = 6 months of full time experience
• 2080 hours of part-time = 12 months of full time experience

Internship: Paid or unpaid internship is acceptable. You will need documentation on company/organization letterhead confirming your position as an intern. If you are interning at a school, the document can be on the registrar's stationery.