Is the certification called CISSP worth the time and money to earn it?

SPC Jacob Hostetler — Mon, 11 May 2020 16:45:28 -0400

CISSP- full form Certified Information Systems Security Professional

Response by SSgt Private RallyPoint Member made May 11 at 2020 5:08 PM

SSgt Private RallyPoint Member — Mon, 11 May 2020 17:08:38 -0400

If you see yourself as a career cyber security guy, then yes. Keep in mind that I t is a very difficult cert to get, even for people who do it for a living.If you don’t have it already, start with Sec+ and work your way up to more difficult certs.

Response by SFC Ralph E Kelley made May 11 at 2020 5:48 PM

SFC Ralph E Kelley — Mon, 11 May 2020 17:48:02 -0400

Salary for Certification: Certified Information Systems Security Professional (CISSP)
$111k - This is the 'top' salary I found - I think he was related to the boss
Pretty much the salary average at most companies is $60k.
It also pretty much a dead for progression since its so classified.

Response by LCDR Robert Turner made May 11 at 2020 6:55 PM

LCDR Robert Turner — Mon, 11 May 2020 18:55:52 -0400

Having held the credential for 15 years I can tell you the value is worth the effort. Broad based knowledge is required so beware of the vendors guaranteeing they can help you pass. Use it wisely and you can earn significantly more than those in the business without a professional very.

As a hiring manager for most of my last 14 years, I would not hire senior talent without a CISSP, CISM or other high end managerial InfoSec credential unless they had a Master’s in the field or significant concentration in Cybersecurity.

Response by Maj Kevin "Mac" McLaughlin made May 11 at 2020 8:19 PM

Maj Kevin "Mac" McLaughlin — Mon, 11 May 2020 20:19:38 -0400

Sort of depends... What do you intend on doing for a career in cyber? Do you plan on becoming management? Do you wish to remain technical and more hands on? Are certifications necessary for the jobs you intend to have? By that I mean specific to standards such as the DoD's? I ask that because when it comes to being certified for the current DoDI 8570 for both IAT and IAM Level 3, CISSP covers most everything, as far as they are concerned. That said, it does not always cover the knowledge base you actually need for certain jobs. For example, if you intend to be a cyber analyst (forensics, pen tester, etc) and never get into security management, CISSP isn't really necessary. On the other hand, like a Master's Degree, it can help you garner a higher salary.

I usually recommend to cyber professionals to get the certification, and make it a priority to maintain. Especially if you are able to get someone to send you to the boot camp and/or even pay for the exam. Even if you believe all you'll ever want to do is hands-on technical work, we all change as we get older. If you feel like it's too much for now, consider getting into a position where they might be willing to send you to classes and pay for the exam (I believe GI Bill will cover the cost of the exam).

Response by SSG Dereck Davis made May 12 at 2020 9:53 AM

SSG Dereck Davis — Tue, 12 May 2020 09:53:37 -0400

Yes. The CISSP is an obtainable goal. If approached incrementally, it is not such a monster of a process. Start studying now, chase some "smaller" certifications along the way.

Response by SGT Kenneth Partyka made May 12 at 2020 4:38 PM

SGT Kenneth Partyka — Tue, 12 May 2020 16:38:54 -0400

As an IT Recruiter in the "real" world, I will tell you ABSOLUTELY. Certifications are extremely necessary in the civilian job world.

Response by LTC Philip Marlowe made May 14 at 2020 12:54 AM

LTC Philip Marlowe — Thu, 14 May 2020 00:54:32 -0400

One of the things I frequently tell College students is over the summers between your college years, instead of playing kick ball, you should consider doing things that will 'synergize' you in your chosen career path. Now, admittedly you might not actually know what you want to do till on/about the end of your 2d year (Sophomore year)….but one would think by then you have a good idea what your major will be. Its at this point you really need to invest some time into what your career path 1) offers you and 2) what you need - in addition to a college education (if its even required) - to make YOU stand out in the market place of your career choosing! Example, say you choose to get a Computer Engineering degree. You should KNOW what additional CERTIFICATIONS employers are looking for and you should consider acquiring them in between your Soph - Jr - Sr years. I told my son that "when you graduate, just look around you at all the others who are graduating with the same degree; HOWEVER, if you've spent your time wisely and possess certifications they do not - then for all intents and purposes, you are the BULL in a herd of COWS...."

Response by LCDR Robert Turner made Feb 23 at 2021 10:09 PM

LCDR Robert Turner — Tue, 23 Feb 2021 22:09:22 -0500

Absolutely! CISSP is considered in many infosec circles to be a management level cert. I would not have my CISO job now without having invested time, talent and treasure pursuing that cert in 2005. You can earn many other technical or operational certifications or credentials but you cannot get and hold a senior level cyber job without CISSP, CISM, C|CISO or other certifications that say "leader". The cost comes back in elevated salary, opportunities to continue learning, and the respect that comes from peers for having earned one of the hardest to earn (and keep.).

Response by SSgt Christophe Murphy made Feb 23 at 2021 10:12 PM

SSgt Christophe Murphy — Tue, 23 Feb 2021 22:12:32 -0500

Short answer, yes. Long answer, if you want to be current in the Cyber Security field especially with DOD it’s an eventual hurdle to navigate