quick question

Soulreaver

ive been reading about the requirements for the cissp and sscp certification exams, and it said i needed 5 years work experience or a masters in information security in order to be certified.

on the website it also said that in order to become an associates i had to pass one of the cissp sscp exams and it was an entry level certification.

im a little confused by this, does this mean i can take either exam whenever i want and if i pass i would only become an associates?

JDMurray

The CISSP requires five years of work-related experience in at least two of the ten domains of the CBK. You can knock one year off for having a specific IT certification (like Security+ or MCSE), and a second year off for having a 4-year college degree. You also need an endorsement from an (ISC)² credential holder that knows your work and experience (see CISSP Applicant Requirements).

The SSCP Applicant Requirements include at least one year of cumulative work experience in one or more of the seven domains in information security covered by the SSCP exam. There are many experiences listed which are accepted, but IT certifications aren't among them. Review the SSCP Work Experience Requirements page to see if you meet the requirements in other ways. The SSCP cert also requires an endorsement from an (ISC)² credential holder that knows your work and experience.

If you do not meet the requires for the CISSP or SSCP, you can still take and pass the CISSP or SSCP exam to become an Associate of the (ISC)². Later, when you have gained the necessary experience, you can be promoted to be fully CISSP-certified.