In this article, Jon Lasser is paid to make broad generalizations about the CISSP Exam. This test attempts a very difficult task. It attempts to test the knowledge of applicants in security management practices; applications and systems development; law, investigations, and ethics; cryptography; and six other major domains. It is offered internationally, so they don't ask questions about US policy and regulation. It's impossible to test on all vendor's equipment, so there are no vendor specific questions. If you need someone certified in Cisco firewalls then you need to look for someone who is Cisco certified. If you want an information security manager, then you might want to consider a CISSP.

But, now Jon has a chance to improve the test. Most, if not all, of the questions on this test are submitted by CISSP's. The submitter must have two references for each question and answer. So Jon, if you felt the questions were too general or a waste of time, then get to work. But, you won't get paid for it because the vast majority of CISSP's do this on a volunteer basis because of their commitment to security.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/67/11021#11021