Home / Definitions / Certified Information Systems Security Professional (CISSP)

Certified Information Systems Security Professional (CISSP)

Webopedia Staff
Last Updated May 24, 2021 7:37 am

Certification for Information System Security Professional (CISSP) is a vendor-neutral certification reflecting the qualifications of information security professionals with an objective measurement of competence as well as a globally recognized standard of achievement. CISSP certification means the information security professional demonstrates a working knowledge of information security, confirms commitment to the profession and establishes a standard of best practices.

CISSP Definition

CISSP Standards and Certification

The Certified Information Systems Security Professional (CISSP) certification is accredited by the ANSI (American National Standards Institute) to ISO (International Organization for Standardization) Standard 17024:2003. The CISSP examination consists of 250 multiple choice questions, covering topics such as Access Control Systems, Cryptography, and Security Management Practices, and is administered by the International Information Systems Security Certification Consortium or (ISC)2.

CISSP Concentration

With the continuous evolution of information security, (ISC)2 offers concentrated credentials, called CISSP Concentrations. Passing a CISSP Concentration exam demonstrates that the information security professional has proven capabilities and subject-matter expertise beyond what is required for the CISSP credential. These are available in the following areas:

Recommended Reading: Webopedia’s list of Computer Certifications for Students and IT Professionals.