Question: is the cissp worth it?
Answer: CISSP is a 100% must for anyone in a security role. And it's valuable for the vast majority of IT pros — especially those who have generic IT roles in smaller companies. Most of those organizations don't have dedicated security specialists so security falls on the shoulders of IT generalists.