Certified Information Systems Security Professional

概要

2010年7月20日の時点で(ISC)²は、134の国で 67,744人のCISSP 認定を持つメンバーを報告している。 2004年6月にCISSP は、米国国家規格協会 (ANSI) のISO/IEC17024:2003によって最初の情報セキュリティ資格として認定され、業界へのグローバル標準の受入とその要求を導いた。それは、それらの情報保証技術（IAT）と 情報保証管理 （IAM）分類の両方で公式に米国防省によって認可された。CISSP は、米国の国家安全保障局のISSEPプログラムのベースラインとして採用された。

歴史

1980年代半ば、情報セキュリティの専門家達は、構造を提供し能力を実証するための標準化された認証プログラムの必要性を見出し始めた。1988年11月、データ処理管理学会（DPMA、Data Processing Management Association  ）のコンピュータ・セキュリティ分科会（SIG-CS、SIG for Computer Security  ）はこの認証プログラムに興味を持った組織を招来し、1989年半ばにNPOの(ISC)² が結成された。

進行中の認証

The CISSP credential is valid for only three years, after which it must be renewed. The credential can be renewed by re-taking the exam; however, the more common method is to report at least 120 Continuing Professional Education (CPE) credits since the previous renewal. Currently, to maintain the CISSP certification, a member is required to earn and submit a total of 120 CPEs by the end of their three-year certification cycle and pay the Annual Membership Fee of US$85 during each year of the three-year certification cycle before the annual anniversary date. With the new changes effective 30 April 2008, CISSPs are required to earn and post a minimum of 20 CPEs (of the 120 CPE certification cycle total requirement) and pay the AMF of US$85 during each year of the three-year certification cycle before the member’s certification or recertification annual anniversary date. For CISSPs who hold one or more concentrations, CPEs submitted for the CISSP concentration(s) will be counted toward the annual minimum CPEs required for the CISSP.
CPEs can be earned through several paths, including taking classes, attending conferences and seminars, teaching others, undertaking volunteer work, professional writing, etc.., all in areas covered by the CBK.  Most activities earn 1 CPE for each hour of time spent, however preparing (but not delivering) training for others is weighted at 4 CPEs/hour, published articles are worth 10 CPEs, and published books 40 CPEs.

推進策

(ISC)² promotes the CISSP certification as the "international gold standard" against which other security certifications are measured.
IT data recovery professionals with security expertise are often in high demand, and the CISSP is one metric by which that expertise can be demonstrated. In 2005, CertMag surveyed 35,167 IT professionals in 170 countries on compensation and found that CISSPs led their list of certificates ranked by salary, with the Certified Information Systems Security Management Professional (CISSP-ISSMP) program drawing $116,970 annually and the Certified Information Systems Security Architecture Professional (CISSP-ISSAP) earning $111,870.” A 2006 Certification Magazine salary survey also ranked the CISSP credential highly at $94,070 per  year, and ranked CISSP concentration certifications as the top best paid credentials in IT, with CISSP-ISSAPs averaging at $114,210 per year and CISSP-ISSMP at $111,280 per year. These numbers correlate with compensation advantages enjoyed by IT security professionals in general, as well as with advantages accruing to the seniority and management roles that intersect with the concentration certificates.

CISSPへの批評

Others reveal a different opinion, mentioning that "academic qualifications support broad knowledge and skills in general, professional certifications may be effective in a limited area of operations. Academic programs exposing the students to theoretical concepts and problem solving experience are critical for preparing graduates for jobs in the information security".
Two CISSP certified experts damaged Samsungs reputation in March 2011, by publishing an exceedingly poorly researched report containing false allegations. The bloggospehere has since been calling for their credentials to be revoked.