What is Certified Information Systems Security Professional (CISSP)? - Definition from Whatis.com

Definition

Certified Information Systems Security Professional (CISSP)

The Certified Information Systems Security Professional (CISSP) exam is designed to ensure that someone handling computer security for a company or client has mastered a standardized body of knowledge. The certification was developed and is maintained by the International Information Systems Security Certification Consortium (ISC²). The exam certifies security professionals in ten different areas:

 

  1. Access control systems and methodology
  2. Application and systems development security
  3. Business continuity planning & disaster recovery planning
  4. Cryptography
  5. Law, investigation, and ethics
  6. Operations security
  7. Physical security
  8. Security architecture and models
  9. Security management practices
  10. Telecommunications and networking security

The exam is designed for professionals with a minimum of 3-5 years of experience. The six-hour exam asks 250 questions.

Contributor(s): Ed Tittel
This was last updated in March 2008

Do you have something to add to this definition? Let us know.

Send your comments to techterms@whatis.com