Experience counts for advanced security certifications

Opinion
May 4, 20042 mins

* ISC2 is launching two advanced certifications

Certified Information Systems Security Professionals (CISSP) who wish to obtain the advanced management or architecture concentration can take advantage of a grandfathering process that recognizes their industry experience, according to the International Information Systems Security Certification Consortium (ISC)2. Current CISSPs have until Dec. 31, 2004 to apply for the ISSAP or ISSMP specialization under this grandfathering opportunity.

The ISC2 is launching two advanced certifications: the Information Systems Security Architecture Professional (ISSAP) and Information Systems Security Management Professional (ISSMP). Each validates extensive knowledge in relevant domains of the ISC2’s Common Body of Knowledge. (For more information about the new certifications, go to https://www.isc2.org/cgi/content.cgi?page=15)

Candidates for grandfathering must be CISSPs in good standing, must demonstrate four total years of professional information security experience, and two years of information security experience in either management or architecture. All candidates must complete a submit a two-part application package to demonstrate their advanced certification qualifications and pay a $450 processing and review fee.

The first part of the application is a checklist to ensure that required items are completed on the application form, confirm CISSP status and verify that the required attachments are included. The second part of the application poses more of a challenge: candidates must highlight their relevant backgrounds and write three short essays.

Prospective ISSAPs must write about their experience with access control systems, as well as methodology and telecommunications. Candidates choose the third essay topic from a list of relevant CBK domains.

Prospective ISSMPs must write about their experience with enterprise security management practices in addition to business continuity planning, disaster recovery planning and operations continuity planning. Candidates choose the third essay topic from a list of relevant CBK domains.

The ISC2 says the grandfathering process should take two weeks from the receipt of the application package to official notification responses to candidates.

For more information, go to https://www.isc2.org/cgi-bin/content.cgi?page=390