Information Technology Security

The CISSP has been adopted as a baseline for the U.S. National Security Agency's ISSEP program. The CISSP Certification is intended for those who plan to build and advance a career in IT Security and have at least 5years experience in the design and deployment of security systems in small, medium and large-scale enterprises.
In order to obtain the CISSP credential, one’s professional experience must be in two or more of the following CISSP Domains:

• Access Control
• Application Development Security
• Business Continuity and Disaster Recover Planning
• Cryptography
• Information Security Governance and Risk Management
• Legal, Regulations, Investigations and Compliance
• Operations Security
• Physical (Environmental) Security
• Security Architecture and Design
• Telecommunications and Network Security

Candidates for a CISA certification must pass the examination, agree to adhere to ISACA's Code of Professional Ethics, submit evidence of a minimum of five years of professional IS auditing, control, or security work, and abide by a program of continuing professional education. Substitutions and waivers of such experience may be obtained as follows:

• A maximum of one year of information systems experience, or one year of financial or operational auditing experience can be substituted for one year of information systems auditing, control, or security experience.
• 60 to 120 completed college semester credit hours (the equivalent of an Associate or Bachelor degree) can be substituted for one or two years, respectively, of information systems auditing, control or security experience.
• A bachelor's or master's degree from a university that enforces the ISACA sponsored Model Curricula can be substituted for one year of information systems audit, control, assurance or security experience. This option cannot be used if three years of experience substitution and education waiver have already been claimed.
• A master’s degree in information security or information technology from an accredited university can be substituted for one year of experience. This option cannot be used if three years of experience substitution and educational waiver have already been claimed.
• Two years as a full-time university instructor in a related field (e.g., computer science, accounting, information systems auditing) can be substituted for one year of information systems auditing, control or security experience.