The applicant must meet the following requirements to qualify to sit for the examination: A. Subscribe to the (ISC)² Code of Ethics; and B. Have one years of direct work experience in one or more of the ten test domains of the information systems security Common Body of Knowledge(CBK). Valid experience includes information systems (IS) security-related work performed as a practitioner, auditor, system administrator or analyst, network administrator or related activity that requires IS security knowledge and involves the direct application of that knowledge. The one year of experience must be the equivalent of actual full-time IS security work (not just IS security responsibilities for a one year period); this requirement is cumulative, however, and may have been accrued over a much longer period of time.
List positions that qualify for your one year of work experience. If your titles are not clearly IS security-related, describe your work in the space enterd. (ISC)² may, at its sole discretion, require more information and/or reject any candidate's application.
Also, I've heard that not every (ISC)2 exam candidiate is fully audited to assure that they meet all certification requirements. The audit rate has been supposed to be only 50%, but it may be lower.
Bah, I doubt I qualify by their standards. I'm definately not studying for and taking the exam unless I know I'll be getting the certification. I still emailed and asked, it's worth a shot.
Guess I'll be moving on to something else...
I still emailed and asked, it's worth a shot.
If you are holding off for a while, you can always take the CWNA.....then go take the CWSP..and tell me what you think... haha
So much to choose from
Am I reading right, in that the experience has to be in ONE of the domains, not spread out among them?
Also, what is some good study material for the exam, and I can order it and study without approval, right? I just don't want to put a bunch of time into this, only to find out I'm not able to even sit for the exam.
So if I fill out all the required information, study for and pass the exam, and they decide to audit me and decide that I don't meet the standards, is it almost guaranteed that I can become an Associate as long as I didn't lie on the application?
Have at least 1 year of cumulative work experience in one or more of the seven test domains in information systems [IS] security.
I'm going to go ahead with this certification. I spoke with the guy from (ISC)2 and he sounded positive about my experience, and especially the fact that I had other security-related certifications. He did explain that this cert isn't that well know, however. I think he said around 800 people, as opposed to 20,000 CISSP's? Don't quote me on the numbers, but it was similar. However, I expect it will grow, as it is a bit newer than the CISSP.
if only for the acronym recognition among both peers and employers.
He did explain that this cert isn't that well know, however.
but there has to be some downside, or upside to the SSCP, or else everyone would be ignoring it and going for the CISSP Associate route.