Certified information Systems security Professional - wikipedia Certified information Systems security Professional CISSP logo Certified Information Systems Security Professional ( CISSP ) is an independent information security certification granted by the International Information System Security Certification Consortium, also known as ( ISC ) 2. As of 1 January 2018, there are 122,289 ( ISC ) 2 members holding the CISSP certification worldwide, in 166 countries with the United States holding the highest member count at 79,617 members. In June 2004, the CISSP designation was accredited under the ANSI ISO / IEC Standard 17024 : 2003. It is also formally approved by the U.S. Department of Defense ( DoD ) in both their Information Assurance Technical ( IAT ) and Managerial ( IAM ) categories for their DoDD 8570 certification requirement. The CISSP has been adopted as a baseline for the U.S. National Security Agency 's ISSEP program. CISSP is a globally recognized certification in the field of IT security. Contents 1 History 2 Certification subject matter 3 Requirements 4 Concentrations 5 Ongoing certification 6 Value 7 References 8 External links History In the mid-1980s, a need arose for a standardized, vendor - neutral certification program that provided structure and demonstrated competence. In November 1988, the Special Interest Group for Computer Security ( SIG - CS ), a member of the Data Processing Management Association ( DPMA ), brought together several organizations interested in this goal. The International Information Systems Security Certification Consortium or `` ( ISC ) 2 '' formed in mid-1989 as a non-profit organization. By 1990, the first working committee to establish a Common Body of Knowledge ( CBK ) had been formed. The first version of the CBK was finalized by 1992, and the CISSP credential was launched by 1994. Certification subject matter The CISSP curriculum covers subject matter in a variety of Information Security topics. The CISSP examination is based on what ( ISC ) 2 terms the Common Body of Knowledge ( or CBK ). According to ( ISC ) 2, `` the CISSP CBK is a taxonomy -- a collection of topics relevant to information security professionals around the world. The CISSP CBK establishes a common framework of information security terms and principles that allow information security professionals worldwide to discuss, debate and resolve matters pertaining to the profession with a common understanding. '' From 2015, the CISSP curriculum is divided into eight domains : Security and Risk Management Asset Security Security Engineering Communications and Network Security Identity and Access Management Security Assessment and Testing Security Operations Software Development Security Before 2015, it covered ten similar domains. Requirements Possess a minimum of five years of direct full - time security work experience in two or more of the ( ISC ) 2 information security domains ( CBK ). One year may be waived for having either a four - year college degree, a master 's degree in Information Security, or for possessing one of a number of other certifications. A candidate without the five years of experience may earn the Associate of ( ISC ) 2 designation by passing the required CISSP examination, valid for a maximum of six years. During those six years a candidate will need to obtain the required experience and submit the required endorsement form for certification as a CISSP. Upon completion of the professional experience requirements the certification will be converted to CISSP status. Attest to the truth of their assertions regarding professional experience and accept the CISSP Code of Ethics. Answer questions regarding criminal history and related background. Pass the multiple choice CISSP exam with a scaled score of 700 points or greater out of 1000 possible points. Have their qualifications endorsed by another ( ISC ) 2 certification holder in good standing. Concentrations Holders of CISSP certifications can earn additional certifications in areas of specialty. There are three possibilities : Information Systems Security Architecture Professional ( CISSP - ISSAP ) Information Systems Security Engineering Professional ( CISSP - ISSEP ), an advanced information security certification issued by ( ISC ) 2 that focuses on the engineering aspects of information security. In October 2014 it was announced that some of its curriculum would be made available to the public by the United States Department of Homeland Security through its National Initiative for Cybersecurity Careers and Studies program. Both ZDNet and Network World have named ISSEP one of tech 's most valuable certifications. Information Systems Security Management Professional ( CISSP - ISSMP ), an advanced information security certification issued by ( ISC ) 2 that focuses on the management aspects of information security. In September 2014, Computerworld rated ISSMP one of the top ten most valuable certifications in all of tech. Ongoing certification The CISSP credential is valid for three years ; most holders renew by submitting Continuing Professional Education ( CPE ) credits. There is also a yearly membership fee required to maintain certification. Value In 2005, Certification Magazine surveyed 35,167 IT professionals in 170 countries on compensation and found that CISSPs led their list of certificates ranked by salary. A 2006 Certification Magazine salary survey also ranked the CISSP credential highly, and ranked CISSP concentration certifications as the top best - paid credentials in IT. In 2008, another study came to the conclusion that IT professionals with CISSP ( or other major security certifications ) tend to have salaries $21,000 higher than IT professionals without such certificates. However, there 's no proof that there 's any cause - and - effect between the certificate and salaries. As of 2017, a study by CyberSecurityDegrees.com surveyed some 10,000 current and historical cyber security job listings that preferred candidates holding CISSP certifications. CyberSecurityDegrees found that these job openings offered an average salary of $17,526 more than the average cyber security salary. ANSI certifies that CISSP meets the requirements of ANSI / ISO / IEC Standard 17024, a personnel certification accreditation program. References Jump up ^ `` Member Counts ''. ( ISC ) 2. Retrieved 15 January 2018. ^ Jump up to : ANSI Accreditation Services - International Information Systems Security Certification Consortium, Inc. ( ISC ) 2 Archived July 18, 2012, at the Wayback Machine... ANSI Jump up ^ `` ( ISC ) 2 CISSP Security Credential Earns ISO / IEC 17024 Re-accreditation from ANSI '' ( Press release ). Palm Harbor, FL : ( ISC ) 2. September 26, 2005. Archived from the original on March 2, 2010. Retrieved November 23, 2009. Jump up ^ `` DoD 8570.01 - M Information Assurance Workforce Improvement Program '' ( PDF ). United States Department of Defense. January 24, 2012. Retrieved April 12, 2012. Jump up ^ `` NSA Partners With ( ISC ) 2 To Create New InfoSec Certification ''. February 27, 2003. Archived from the original on September 29, 2011. Retrieved December 3, 2008. Jump up ^ Harris, Shon ( 2010 ). All - In - One CISSP Exam Guide ( 5 ed. ). New York : McGraw - Hill. pp. 7 -- 8. ISBN 0 - 07 - 160217 - 8. Jump up ^ History of ( ISC ) 2. ( ISC ) 2 Jump up ^ Conrad ; Misenar ; Feldman. 11th Hour CISSP. Syngress. ISBN 978 - 0 - 12 - 417142 - 8. Jump up ^ Tipton ; Henry. Official ( ISC ) 2 Guide to the CISSP CBK. Auerbach Publications. ISBN 0 - 8493 - 8231 - 9. Jump up ^ `` ( ISC ) 2 CISSP and SSCP Domain Refresh FAQ ''. ( ISC ) 2. Retrieved 15 May 2015. Jump up ^ `` Forensics and Incident Response ''. www.peerlyst.com. Retrieved 3 April 2016. Jump up ^ `` CISSP Professional Experience Requirement ''. ( ISC ) 2. 2009. Retrieved December 3, 2008. Jump up ^ `` How to Become an Associate ''. ( ISC ) 2. 2009. Retrieved November 23, 2009. Jump up ^ `` ( ISC ) 2 Code of Ethics ''. ( ISC ) 2. 2009. Retrieved December 3, 2008. ^ Jump up to : `` How To Certify ''. ( ISC ) 2. 2009. Retrieved December 3, 2008. Jump up ^ `` Endorsement ''. ( ISC ) 2. 2009. Retrieved August 2, 2015. Jump up ^ `` CISSP ® Concentrations ''. ( ISC ) 2. Archived from the original on 11 December 2014. Retrieved 17 January 2015. Jump up ^ InfoSecurity Magazine ( Sep 2009 ) : Finding your way : An overview of information security industry qualifications and associations Jump up ^ ( ISC ) 2 Offers Certification Via DHS Jump up ^ ZDNet ( Feb 2014 ) : 20 technology certifications that are paying off Jump up ^ Network World ( Dec 2013 ) : 18 Hot IT Certifications for 2014 Jump up ^ GCN : DOD approves new credentials for security professionals Jump up ^ InfoSecurity Magazine ( Sep 2009 ) : Finding your way : An overview of information security industry qualifications and associations Jump up ^ ComperWorld : IT skills that are in demand, and those that will be Jump up ^ `` Maintaining Your Credential ''. ( ISC ) 2. 2009. Retrieved December 3, 2008. Jump up ^ `` Top Certifications by Salary in 2007 ''. Certification Magazine. April 11, 2007. Archived from the original on March 29, 2007. Retrieved October 14, 2007. Jump up ^ Sosbe, Tim ; Hollis, Emily ; Summerfield, Brian ; McLean, Cari ( December 2005 ). `` CertMag 's 2005 Salary Survey : Monitoring Your Net Worth ''. Certification Magazine. CertMag. Archived from the original on June 7, 2007. Retrieved April 27, 2007. Jump up ^ Salary boost for getting CISSP, related certs. NetworkWorld Jump up ^ CyberSecurityDegrees. com 's Study of the Most Lucrative Cyber Security Certifications Cyber Security Degrees External links Official website Information security certifications CompTIA Security+ CSA+ CASP Cisco Systems CCNA Security CCNP Security CCIE Security EC - Council CEH CNDA EITCI EITCA / IS ISACA CISA CISM CRISC ( ISC ) 2 CISSP SSCP ISSMP ISSEP ISSAP Mile2 CPTE Offensive Security OSCP OSWP OSCE OSEE OSWE eLearnSecurity eCPPT GIAC GISF GSEC GCIA GCIH GCUX GCWN GCED GPEN GWAPT GAWN GICSP G7799 GSNA GISP GSLC GCPM GSSP - JAVA GSSP -. NET GWEB GCFE GCFA GREM GNFA GLEG GSE Retrieved from `` https://en.wikipedia.org/w/index.php?title=Certified_Information_Systems_Security_Professional&oldid=822177825 '' Categories : Computer security qualifications Data security Information technology qualifications ( ISC ) 2 Hidden categories : Webarchive template wayback links Talk Contents About Wikipedia Deutsch Español فارسی Français 한국어 Nederlands 日本 語 Polski Português Suomi தமிழ் 中文 5 more Edit links This page was last edited on 24 January 2018, at 21 : 12. About Wikipedia

Question: eight domains of the csslp common body of knowledge (cbk)
Answer: Security and Risk Management