Inquiry About Job History Requirements for CISSP Credential

[Alparsalan]

Hi everyone,

Good morning!

I have been with the same company since 2003 and have recently passed the CISSP certification. Throughout my career here, I’ve held various roles, and I am currently the Security Team Leader, a position I’ve held since 2016. Previously, I served as the Network Team Leader.

In my current role, I focus on Domain 1 of the CISSP framework, while in my previous position, I focused on Domain 4.

I have a question regarding the job history requirements for the CISSP credential:

1. Do I need to create a separate job history record for each role I’ve held within the same company to meet the work experience requirements?
2. Is a single job experience letter sufficient to cover both roles, or do I need to request two separate letters from my HR department?

I appreciate any guidance or insights you can provide!

Thank you!

Alparsalan Khan

[nkeaton]

@Alparsalan I saw your question on social media as well. I did not repeat what I put here. It is nice that you are being thorough. I had reached out to ISC2 several years ago because I was interested in taking the HCISPP because I am not in healthcare but have a task that relates somewhat to PHI. I outlined my thoughts. I was told that they cannot decide that for me. I decided to pursue other certifications instead. Apparently it was a good choice since ISC2 decided to drop the certification. With my local CS chapters and other CS work, I know a lot of people in some aspect of healthcare and was very interested in knowing more. I do have the CBK and plan to read it at some point. I understand that it wasn’t necessarily profitable, but I thought was a great bridge for those in healthcare that wanted to understand it better or wanted to transition. If I can help you, I will. I have had to fill out for ISC2 endorsement 5 times (2 did not require endorsement at the time). Although audits are supposed to be random, I have never been subject to one. I did have someone that I endorsed come up for audit on his SSCP. Unlike me he submits it as an attachment in resume style. He definitely had the experience. About a month later he took his CISSP and passed. I endorsed him for that and was exactly the same resume submission. It passed no problem that time. Hope that all goes smoothly for you.

[emb021]

@nkeaton Yeah, that's a problem.  I've had to point out to many people that its "Associate of ISC2", NOT "Associate CISSP" or the like, and to be VERY carefully not to give the misimpression they have the CISSP, such as saying that passed the test to give the impression they have the cert.

Yes, other cert orgs have associate level for specific certs, but NOT ISC2.

[nkeaton]

@emb021 I have had to explain too many times that an Associate of ISC2 is only a membership and not a certification. You are so correct in the permutations that they will use on LinkedIn and other places to misrepresent themselves. The example of the endorser offer is so very blatant. I almost prefer what ISACA or PMI does. As you know ISACA will not even allow submission of the application until have the required experience. PMI makes a person prove the experience up front before gives permission to sit for the exam. Neither brings in as much money for those methods but is definitely a bit insulting to those of us who actually earned certification.

[emb021]

@nkeaton" "Associate of ISC2" is a membership, not a certification."

That's a better way of explaining it.  I'll have to remember that.

Am well aware of both ISACA and PMI's methods.  PMI also allows for an associate level for PMP, but I think you still have to have some experience.  At least with PMI, once you pass you got the cert automatically, but that's because you submitted everything before.  ISACA allows you get the experience 5-6 years after passing.

But I'm bothering by ISACA rolling out more certs of late.  We already got 3 AI related ones from them just in the last few months....