Passed CISSP on first try wondering about endorsement times...
I'm sure this has been discussed in other threads. I took the CISSP exam on July 7, Monday and passed it
(after a grueling 4.5 hours). I submitted my resume and endorsement form on July 8, Tuesday. I received a confirmation email on July 9, Wednesday, that they have received my endorsement documentation and have been placed in queue for review.
I am just curious what people's experience have been in terms of how long the endorsement time takes. The confirmation email mentioned 6 weeks for my submission to be reviewed and processed. Has that been most people's experience?
On a separate note, it appears that those on TechExams threads who plan on or are about to take the exam want to know how people prepare for the exam. In my particular case, here was my study plan and schedule:
1) Back in mid-April, I signed up for the July 7 exam (Pearson Vue)
2) Started studying the day after Memorial Day weekend
3) Study materials are:
a) Shon Harris AIO 6th edition - primary - read the entire book and answered all practice exams
b) Eric Conrad 11th Hour guide - skimmed through 2 days before the exam
c) Attended SANS Institute MGT414 SANS +S Training Program for the CISSP Certification Exam in the last week of June (6 day boot camp taught by Eric Conrad). I made sure to complete reading Shon Harris' AIO book prior to the boot camp to get the most out of it. The boot camp was very helpful, but I don't believe I could have passed the exam with just this boot camp. It's great for reinforcement, Eric had us answer 40 practice questions after each domain. But I feel Shon Harris' practice exams were tougher and closer to the actual ISC2 exam.
As for my background, though I started my career in IT as a developer (and still remain so at heart), I've been in a governance role in our Governance, Risk and Compliance practice for the last 10 years. Our GRC practice includes testing SOX compliance, managing SDLC controls, and managing DR. I also have a CISA and PMP certification. So while I breezed through the governance, software security (to an extent) and BCP domains, I had to study really hard for the Telecomm and Cryptography domains in particular.
I was averaging low to mid-70's in the practice exams. I started questioning my preparedness when Eric kept repeating that we should be getting 80% or higher to have a safe cushion. I went ahead with the exam anyway and thankfully got the outcome I desired and worked hard for.
Hope this is helpful to those who are taking the exam soon. And I would very much appreciate people's feedback regarding endorsement times. Thanks!!

I am just curious what people's experience have been in terms of how long the endorsement time takes. The confirmation email mentioned 6 weeks for my submission to be reviewed and processed. Has that been most people's experience?
On a separate note, it appears that those on TechExams threads who plan on or are about to take the exam want to know how people prepare for the exam. In my particular case, here was my study plan and schedule:
1) Back in mid-April, I signed up for the July 7 exam (Pearson Vue)
2) Started studying the day after Memorial Day weekend
3) Study materials are:
a) Shon Harris AIO 6th edition - primary - read the entire book and answered all practice exams
b) Eric Conrad 11th Hour guide - skimmed through 2 days before the exam
c) Attended SANS Institute MGT414 SANS +S Training Program for the CISSP Certification Exam in the last week of June (6 day boot camp taught by Eric Conrad). I made sure to complete reading Shon Harris' AIO book prior to the boot camp to get the most out of it. The boot camp was very helpful, but I don't believe I could have passed the exam with just this boot camp. It's great for reinforcement, Eric had us answer 40 practice questions after each domain. But I feel Shon Harris' practice exams were tougher and closer to the actual ISC2 exam.
As for my background, though I started my career in IT as a developer (and still remain so at heart), I've been in a governance role in our Governance, Risk and Compliance practice for the last 10 years. Our GRC practice includes testing SOX compliance, managing SDLC controls, and managing DR. I also have a CISA and PMP certification. So while I breezed through the governance, software security (to an extent) and BCP domains, I had to study really hard for the Telecomm and Cryptography domains in particular.
I was averaging low to mid-70's in the practice exams. I started questioning my preparedness when Eric kept repeating that we should be getting 80% or higher to have a safe cushion. I went ahead with the exam anyway and thankfully got the outcome I desired and worked hard for.
Hope this is helpful to those who are taking the exam soon. And I would very much appreciate people's feedback regarding endorsement times. Thanks!!
Comments
A coworker's endorsement did take 4 weeks which was one of the few times I saw an endorsement take longer than the usual 2 weeks.
Mine has been over 2 weeks... acknowledgement sent 2nd July.
I am eagerly waiting for the reply.
2016 Goals: M.Sc Cyber Security :study:, ITILF COLOR=#FF0000]Passed[/COLOR, COBIT5 F COLOR=#ff0000]Feb[/COLOR][COLOR=#ff0000].[/COLOR, CGEITCOLOR=#ff0000]Jun[/COLOR][COLOR=#ff0000]. ???[/COLOR, CIPMCOLOR=#ff0000]???[/COLOR
CISSP - 2.5 weeks
CAP - 2.5 weeks
ISSEP - 5.0 weeks
In regards to the CISSP, it seems to take about 2-3 weeks for most people, based on what I have heard from many.
The wait is killing...
2016 Goals: M.Sc Cyber Security :study:, ITILF COLOR=#FF0000]Passed[/COLOR, COBIT5 F COLOR=#ff0000]Feb[/COLOR][COLOR=#ff0000].[/COLOR, CGEITCOLOR=#ff0000]Jun[/COLOR][COLOR=#ff0000]. ???[/COLOR, CIPMCOLOR=#ff0000]???[/COLOR
2016 Goals: M.Sc Cyber Security :study:, ITILF COLOR=#FF0000]Passed[/COLOR, COBIT5 F COLOR=#ff0000]Feb[/COLOR][COLOR=#ff0000].[/COLOR, CGEITCOLOR=#ff0000]Jun[/COLOR][COLOR=#ff0000]. ???[/COLOR, CIPMCOLOR=#ff0000]???[/COLOR
Everyone who got certified before took almost 2 weeks to the date of submission. The first coworker to pass after I did took about 5 weeks. Maybe there are a lot of submissions at the moment.
Stay in there, I know the wait is a killer! As long as you got the pass print out and knowledge that your ducks are in a row, it's just a matter of time
04/15/2014 - Started studying, seriously - two hours a night four days a week and four hours each on Saturday and Sunday.
06/30/2014 - Passed the CISSP exam - more difficult than imagined
07/03/2014 - Submitted endorsement paperwork and received endorsement acknowledgement from ISC2
08/06/2014 - Received Congratulations from ISC2 acknowledging me as a CISSP!
It is a fun and difficult journey. Thank you all for support and encouragement.
July 9th; CISSP application faxed and submittal confirmed via mail.
August 7th; was notified I am an officious CISSP via email.
Exam Passed - 6/17
Endorsement Submitted/Acknoweldgement - 8/4
Spooky, I too passed the exam on the 23rd July and received notification of receipt of my application on 28th July. From this thread I am expecting something by the 5 week point which will be next Monday. However it may take longer due to summer vacations.
I will update when I hear anything, we should be quite close together in the same queue.
mine has just flashed up on my email. Now whats next.....
July 23rd - Took and passed CISSP - received email notification for next steps.
July 25th - Sent in packet information (endorsement, resume, etc.)
August 22nd (4 weeks) - received an email that my application is being audited.
August 26th - sent in additional information, release form, etc.
Now we wait some more...
My audit was in limbo until I emailed about it after 15 business days. Turns out the phone numbers were outdated. As soon as I provided the correct numbers, they were contacted almost immediately and my audit was done the next day.
Just an update to my previous post....I AM OFFICIAL AND AUDIT COMPLETE!!
Got the email yesterday on September 3rd.Total time 5 and a half weeks (including Audit). Hope this helps you guys who are waiting as well.
It doesn't hurt - I didn't at first (I also had an active/current CISSP endorse me). I just sent in my resume and duties figuring they should be able to figure out what domain applies to which skill, AD administration = Access Control, firewalls = network security + access control, etc. However when I was audited I sent in an updated resume highlighting the domains under each job title. Not sure if it helped but think that (ISC)2 goes through thousands of these applications and what little you can do to help them I say do it.