The Certified Information Systems Security Professional (CISSP) exam is designed to ensure that someone handling computer security for a company or client has mastered a standardized body of knowledge. The certification was developed and is maintained by the International Information Systems Security Certification Consortium (ISC²). The exam certifies security professionals in ten different areas:
- Access control systems and methodology
- Application and systems development security
- Business continuity planning & disaster recovery planning
- Cryptography
- Law, investigation, and ethics
- Operations security
- Physical security
- Security architecture and models
- Security management practices
- Telecommunications and networking security
The exam is designed for professionals with a minimum of 3-5 years of experience. The six-hour exam asks 250 questions.