My Profile as an InfoSec Instructor
Image
Reply
Tag Archives: CISSP
DoD 8570 Approved Baseline Certifications
It seems that CEH, CISSP, and CISM are one of the most cost-benefit combinations for security professionals to invest. (Please be reminded that the table lists only part of the DoD 8570 Approved Baseline Certifications.)
- https://www.sans.org/dodd-8570/
- https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/857001m.pdf
ISC2 member counts
The latest InfoSec professionals statistics according to the ISC2 member counts as of Dec 31, 2018.
- Compared with the number as of June 1st, 2018, CISSP increases by 3 in Taiwan, while CCSP, CSSLP and ISSEP increase by 1 respectively. Wentz Wu is one of the increases.
- There is a decrease of CISSP in Korea, ISSEP in India, ISSMP in Singapre and Hong Kong.
- The CCSP certification grows fast.
Finally, CISSP-ISSEP Certificate Received
Really happy to receive the CISSP-ISSEP certificate today to become the first ISSEP holder in Taiwan:)
Bruce Passed ISC2 CISSP-ISSAP Exam on 14th November
It’s a lovely afternoon and peaceful moment to enjoy the view looking out through the floor-to-ceiling window from the office.
When the ISSAP score report disclosed “Congratulations!”, my goal has been achieved pursuing the planned certifications from ISC2. I spent around 4 months in total studying intensively and finally passed the six ISC2 exams: CISSP, CCSP, CSSLP, CISSP-ISSEP, CISSP-ISSMP, and CISSP-ISSAP.
After studying for 40 hours within 8 days (from 2018/11/06 to 2018/11/13), I cleared the ISC2 CISSP-ISSAP (Information Systems Security Architecture Professional) exam today. This exam is one of the 3 CISSP concentrations. I would say the level of difficulty would be ISSAP < ISSMP < ISSEP.
The ISACA CGEIT is the last mile for me to declare success achieving my annual goal.
My plan of the year is revised as follows:
- Milestone #1: PMI + CISSP
- 2018/04/09 ACP
- 2018/04/27 PBA
- 2018/06/19 CISSP
- 2018/07/10 RMP
- Milestone #2: ISACA
- 2018/07/24 CISM
- 2018/08/13 CRISC
- 2018/08/28 CISA
- Milestone #3: ISC2
- 2018/09/07 CCSP (originally scheduled on 2018/09/14)
- 2018/09/13 CSSLP (originally scheduled on 2018/09/28)
- 2018/09/25 CISSP-ISSEP (bonus)
- Milestone #4: EC-Council
- 2018/10/09 CEH (originally scheduled on 2018/10/15)
- 2018/10/12 ECSA (originally scheduled on 2018/10/29)
- Bonus Exams: scrum.org
- 2018/10/21, PSM I
- 2018/10/23, ISO 27001 LA
- 2018/10/27, PSPO I
- 2018/10/28, PSD
- Final Optimization
- 2018/11/06 CISSP-ISSMP
- 2018/11/14 CISSP-ISSAP
- 2018/11/30 CGEIT (projected)
Addon, 2019/12/10:
When I passed the ISSAP exam, I was really excited as all my annual objectives were achieved and I didn’t note down the materials I used.
The following are the materials I used:
- CISSP-ISSAP exam outline
- All the CBKs I have (CBKs of CCSP, CSSLP, CISSP, ISSMP, ISSAP, and ISSEP-old version)
- NIST SP 800 series
- ISSAP CBK Suggested References (I bought as many as I can).
I didn’t use any test engine but the practice questions in the CBKs.
Bruce Passed ISC2 CISSP-ISSMP Exam on 6th November
After studying for 40 hours within 8 days (from 2018/10/29 to 2018/11/05), I cleared the ISC2 CISSP-ISSMP (Information Systems Security Management Professional) exam today. This exam is one of the 3 CISSP concentrations. As its name denotes, this exam is all about basic management concepts and the difficulty level is not that high as far as an experienced CISSP is concerned.
My original plan of the year for learning and growth is scheduled to be completed by the end of October with one month buffer (November as the worst case). Since my goals are achieved ahead of the schedule, I decide to do more as final optimization using the one-month buffer, that is, the month of November.
My plan of the year is revised as follows:
- Milestone #1: PMI + CISSP
- 2018/04/09 ACP
- 2018/04/27 PBA
- 2018/06/19 CISSP
- 2018/07/10 RMP
- Milestone #2: ISACA
- 2018/07/24 CISM
- 2018/08/13 CRISC
- 2018/08/28 CISA
- Milestone #3: ISC2
- 2018/09/07 CCSP (originally scheduled on 2018/09/14)
- 2018/09/13 CSSLP (originally scheduled on 2018/09/28)
- 2018/09/25 CISSP-ISSEP (bonus)
- Milestone #4: EC-Council
- 2018/10/09 CEH (originally scheduled on 2018/10/15)
- 2018/10/12 ECSA (originally scheduled on 2018/10/29)
- Bonus Exams: scrum.org
- 2018/10/21, PSM I
- 2018/10/23, ISO 27001 LA
- 2018/10/27, PSPO I
- 2018/10/28, PSD
- Final Optimization
- 2018/11/06 CISSP-ISSMP
Bruce Passed ISC2 CISSP-ISSEP Exam on 25th September
After studying for 42 hours in 12 days (from 2018/09/14 to 2018/09/25), I cleared the ISC2 CISSP-ISSEP exam this afternoon and it’s really lucky for me, probably, to be the first exam taker who passed this exam in Taiwan.
The following is what I used to prepare for this exam:
- Official (ISC) 2® Guide to the CISSP®-ISSEP® CBK® ((ISC) 2 Press) 1st Edition
- Systems Engineering Fundamentals Kindle Edition
- Official (ISC)² Guide to the CSSLP, Second Edition
- Official (ISC)2 Guide to the CISSP CBK ((ISC)2 Press) 4th Edition
- Official (ISC)2 Guide to the CISSP-ISSMP CBK ((ISC)2 Press) 2nd Edition
- Official (ISC)2 Guide to the ISSAP CBK ((ISC)2 Press) 2nd Edition
- The Official (ISC)2 Guide to the CCSP CBK 2nd Edition
- Official (ISC)2® Guide to the CAP® CBK® ((ISC)2 Press) 2nd Edition
- IATF Release 3.1
- FEA Consolidated Reference Model Document Version 2.3
- FEA Practice Guide
- ISO 27001
- ISO 27005
- ISO 21827
- PMBOK® Guide – Sixth Edition
- NIST Special Publications
- 800-12
- 800-100
- 800-64 Rev 2
- 800-18 Rev 1
- 800-34 Rev 1
- 800-39
- 800-30 Rev 1
- 800-27 Rev A
- 800-37
- 800-37 Rev 2
- 800-161 (vol1 & vol2)
- 800-55
- 800-50
- 800-53
- 800-53A
- 800-60 (vol1 & vol2)
- 800-86
- 800-61
800-40 Rev 3 - 800-128
- 800-137
- 800-115
- 800-92
- 800-88
My exam preparation is completely directed by the ISC2 CISSP-ISSEP exam outline. The most common references used for the ISSEP by domain from ToniHardy and the ISC2 official references are quite helpful. Having passed CSSLP exam helps as well.
The milestones are updated as follows:
- Milestone #1: PMI + CISSP
- 2018/04/09 ACP
- 2018/04/27 PBA
- 2018/06/19 CISSP
- 2018/07/10 RMP
- Milestone #2: ISACA
- 2018/07/24 CISM
- 2018/08/13 CRISC
- 2018/08/28 CISA
- Milestone #3: ISC2
- 2018/09/07 CCSP (originally scheduled on 2018/09/14)
- 2018/09/13 CSSLP (originally scheduled on 2018/09/28)
- 2018/09/25 CISSP-ISSEP (bonus)
- Milestone #4: EC-Council
- 2018/10/15 CEH
- 2018/10/29 ECSA
Moving forward is the best strategy of retreat! I’ll keep moving.
Risk Management
Bruce Passed ISC2 CSSLP Exam on 13th September
After studying for 36 hours in 6 days (from 2018/09/08 to 2018/09/13), I cleared the ISC2 CSSLP exam this afternoon. The following is what I used to prepare for this exam:
- Official (ISC)² Guide to the CSSLP, Second Edition
- Official (ISC)2 Guide to the CSSLP ((ISC)2 Press) 1st Edition
- CSSLP Certification All-in-One Exam Guide
The ISC2 official Guide to the CSSLP helps. The exam is not so challenging for an experienced developer with CISSP qualification.
The milestones are updated as follows:
- Milestone #1: PMI + CISSP
- 2018/04/09 ACP
- 2018/04/27 PBA
- 2018/06/19 CISSP
- 2018/07/10 RMP
- Milestone #2: ISACA
- 2018/07/24 CISM
- 2018/08/13 CRISC
- 2018/08/28 CISA
- Milestone #3: ISC2
- 2018/09/07 CCSP (originally scheduled on 2018/09/14)
- 2018/09/13 CSSLP (originally scheduled on 2018/09/28)
- Milestone #4: EC-Council
- 2018/10/15 CEH
- 2018/10/29 ECSA
What a relief! Keep moving!
Bruce Passed CISSP Exam on 19th Jun
Special thanks to Luke Ahmed and his Facebook Group: CISSP Exam Preparation – Study Notes and Theory.
After a prolonged 2-month journey that takes 250 hours in 45 effective study days, I finally cleared the CISSP exam today. Thanks to the new CAT examination with 100 questions in 3 hours, the threshold to obtaining CISSP is lowered to a reasonable level, even though it is still quite challenging.
It’s nice that the CISSP exam is reasonably challenging. I wish you all the best to clear it ASAP.
The following resources are helpful to me:
- TOOLS: when in doubt, google it, wiki it, and watch it!!!!!
- Wikipedia
- YouTube
- Text
- Sample Questions
- References
- CBK Suggested References for CISSP
- The Facebook Group: CISSP Exam Preparation – Study Notes and Theory
- Nick’s Organized Sunflower CISSP Notes
- NIST SP 800 series and FIPS 199 and 200
- ISO Standards: 27001/27005
- Microsoft Windows Common Criteria Evaluation Security Target
- Trusted Computer System Evaluation Criteria [“Orange Book”]
- How I Passed the CISSP Exam! (My 12 week method)
- CISSP Practice Questions of the Day from IT Dojo
PS. I am sorry to let you know that I’ve attended the official CISSP classroom-based training in Taipei and it’s a total waste of money and disappointing. The text for this class from ISC2 is just a bunch of slides with terribly poor quality and the instructor, from my point of view, is not prepared and qualified for this class either.