Re: question about CISSP experience requirements

[e.m.baechle () ieee org]

Kurt,

You raise a good question.  My opinion is that the CISSP designation should specifically identify security experience.  
However, my opinion is likely very far off from reality.  I've seen quite a few people achieve CISSP status from 
passing a test, with no more experience on their resume than 5 years of changing backup tapes.  Suddenly they're a 
"security expert" with field experience.

The CISSP certification itself is the "gold standard" however my observations have been that a  lot of underqualified 
people are achiving it.  Much the same way that $$$ drove the MCSE program to keeping a low passing score.  Again, in 
my observation, I think you could achieve the CISSP designation if you had someone willing to attest to you having 
full-time security responsibility.

Sincerely,

Eric B.


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------