CISSP Certification Requirements And Cost

Editorial Note: We earn a commission from partner links on Forbes Advisor. Commissions do not affect our editors' opinions or evaluations.

The Certified Information Systems Security Professional (CISSP®) credential demonstrates mastery of developing and overseeing large-scale cybersecurity programs. When it comes to the best cybersecurity certifications, many consider CISSP the industry’s gold standard. Individuals who meet CISSP requirements can earn the certification and qualify to take on more professional responsibility in their cybersecurity jobs.

This guide offers information on CISSP certification requirements, including experience, suggested preparation times and CISSP certification exam costs.

CISSP certification, offered by (ISC)², is an advanced credential for information systems and cybersecurity professionals. This certification highlights an individual’s ability to create, deploy and manage cybersecurity efforts for large organizations.

CISSP certification requirements include a significant amount of professional experience and passing a lengthy exam. This credential suits experienced workers over entry-level and mid-level professionals.

Though this certification is not required by employers, it can boost candidates’ earning power and help them qualify for advanced roles in information security. CISSPs often work in positions like chief information security officer (CISO), network architect, security auditor and security manager, among others.

Aspiring CISSPs should familiarize themselves with the certification’s requirements before pursuing this credential.

CISSP certification requirements stipulate that each candidate must have a minimum of five years of relevant professional experience. (ISC)² specifies eight security domains:

Prospective CISSPs must accumulate experience in two of the eight domains to meet CISSP certification requirements. They can also apply (ISC)²-approved four-year college degrees and other credentials, which may qualify as a year of experience. Paid and unpaid internships also count toward the CISSP requirement.

The CISSP exam covers the eight domains of security in a four-hour test comprising 125 to 175 required responses. These appear as multiple-choice questions and advanced innovative items. Test-takers must earn a 700 out of 1,000 to pass. Candidates register to take the exam with Pearson VUE.

After passing the exam, individuals can apply for endorsement online. The endorsement must come from an (ISC)²-certified professional who can advocate for your professional experience as a credential-holder in good standing. Individuals must receive endorsements within nine months of passing the exam.

Earning CISSP certification can deliver many professional benefits, but individuals should also understand the costs associated with pursuing the credential. Along with the required time investment, consider the following CISSP certification exam costs and any required payments relating to preparation and recertification.

Many organizations offer prep courses for the CISSP certification exam, and their costs vary drastically. Make sure to include exam prep costs, which may range from a few hundred dollars to a few thousand, in your CISSP budget. (ISC)² offers several exam prep methods, including self-paced, instructor-led and team-based options.

The CISSP certification exam costs $749. Individuals can receive vouchers from partner organizations after completing CISSP exam training courses.

Individuals must meet CISSP recertification requirements every three years to maintain their credentials. Each certification holder must earn 120 continuing professional education (CPE) credits over this three-year period. Costs relating to CPEs can vary significantly, but each certified individual must pay an annual $125 fee to (ISC)².

Individuals who have met CISSP requirements and earned their credentials can pursue work in many information security and cybersecurity roles. As of 2023, the number of open cybersecurity roles far outpaces the number of qualified professionals, indicating strong continued demand in the sector.

We sourced salary information for this section from Payscale.

Data from Cyberseek.org indicates that among current cybersecurity openings requiring certification, CISSP ranks as the most in-demand credential. The following section explores roles for CISSP certification-holders.

Average Annual Salary: Around $173,500Required Education: Bachelor’s degree in cybersecurity, information security or a related field; master’s preferredJob Description: CISOs rank among the top positions in information security for responsibility and salary. This C-suite role reports directly to the CEO and requires significant experience, practical skills and expertise in information security.

CISOs oversee their organizations’ information security efforts. Often referred to as “chief security officers,” they supervise teams of infosec workers, set organizational directives, establish company-wide best practices and manage resource allotment. CISOs working in large, international businesses may interact with government agencies and congresspeople to ensure compliance with legal standards for information security.

Average Annual Salary: Around $125,000Required Education: Bachelor’s degree in computer science or related field, MBA degree often preferredJob Description: IT directors oversee departments of IT workers and manage organizations’ computer systems operations. They provide solutions to companies’ computer-related issues, including software upgrades, security concerns and general technical issues. IT directors communicate with executives to ensure company-wide directives are carried out successfully.

These directors research new IT software and hardware to keep their organizations up to date and safe. They track metrics for managing IT professionals, along with storage, hardware and software. IT directors also handle employee schedules and budget planning. As department heads, they must possess strong communication skills to interact with mid-level professionals and C-suite executives.

Average Annual Salary: Around $73,500Required Education: Bachelor’s degree in cybersecurity, computer and information technology or a related fieldJob Description: Security analysts work in computer systems, networks and information security departments to prevent, monitor and respond to security breaches. This broad professional title refers to workers who handle a variety of tasks in computer and network security.

These professionals work in many industries as “first responders” for cyberattacks. They must demonstrate deep knowledge of hardware, software and data storage to understand potential vulnerabilities and security solutions. Security analysts may help design security systems and handle encryption efforts for businesses to protect sensitive information.

Average Annual Salary: Around $126,000Required Education: Bachelor’s degree in network engineering or a related field; master’s in cybersecurity or a related field often preferredJob Description: Network architects design and implement organizations’ security infrastructures. These professionals test and analyze existing safety structures to identify vulnerabilities and improvements. They install and maintain computer systems, including interconnected devices like firewalls and routers.

Before deploying any updates or upgrades, these information security professionals create models to test their networks in a controlled environment. Modeling allows network architects to forecast security and traffic issues before implementing their infrastructures in the real world. They also train and educate IT workers on organizational best practices.

The two primary CISSP requirements are passing the exam and gaining five years of relevant professional experience.

No. CISSP certification suits experienced cybersecurity and information security professionals, requiring a minimum of five years of experience in the field.

New Cardiology Certification Board: What's the Plan?

The proposal by the major cardiovascular societies in the US to form a new board of cardiovascular medicine to manage initial and ongoing certification of cardiologists represents something of a revolution in the field of continuing medical education and exam of competency. 

Five US cardiovascular societies — the American College of Cardiology (ACC), the American Heart Association (AHA), the Heart Failure Society of America (HFSA), the Heart Rhythm Society (HRS), and the Society for Cardiovascular Angiography & Interventions (SCAI) — have now joined forces to propose a new professional certification board for cardiovascular medicine, to be known as the American Board of Cardiovascular Medicine (ABCVM). 

The ABCVM would be independent of the American Board of Internal Medicine (ABIM), the current organization providing maintenance of certification for cardiologists as well as many other internal medicine subspecialties. The ABIM's maintenance of certification process has been widely criticized for many years and has been described as "needlessly burdensome and expensive." 

The ABCVM is hoping to offer a more appropriate and supportive approach, according to Jeffrey Kuvin, MD, a trustee of the ACC, who has been heading up the working group to develop this plan. 

Kuvin, who is chair of the cardiology at Northwell Health, Manhasset, New York, a l arge academic healthcare system, explained that maintenance of certification has been a topic of discussion across the cardiovascular community for many years, and the ACC has a working group focused on the next steps for evaluation of competency, which he chairs.

"The topic of evaluation of competence has been on the mind of the ACC for many years and hence a work group was developed to focus on this," Kuvin noted. "A lot of evolution of the concepts and next steps have been drawn out of this working group. And now other cardiovascular societies have joined to show unification across the house of cardiology and that this is indeed the way that the cardiovascular profession should move." 

The general concept behind the new cardiology board is to separate cardiology from the ABIM. 

"This is rooted from the concept that cardiology has evolved so much over the last few decades into such a large multidimensional specialty that it really does demarcate itself from internal medicine, and as such, it deserves a separate board governed by cardiologists with collaboration across the entirely of cardiology," Kuvin said. 

Cardiology has had significant growth and expansion of technology, tools, medications, and the approach to patients in many specialities and subspecialties, he added. "We have defined training programs in many different areas within cardiology; we have our own guidelines, our own competency statements, and in many cases, cardiology exists as its own department outside of medicine in many institutions. It's just time to separate cardiology from the umbrella of internal medicine." 

The new cardiology board would be separate from, and not report to, the ABIM; rather, it would report directly to the American Board of Medical Specialties (ABMS), the only recognized medical certification body in the US. 

Under the present system, managed by the ABIM, clinicians must undergo two stages of certification to be a cardiologist. First, they have to pass the initial certification exam in general cardiology, and then exams in one of four subspecialties if they plan to enter one of these, including interventional cardiology, electrophysiology, advanced heart failure or adult congenital heart disease. 

Next, clinicians enter the maintenance of certification phase, which can take three different forms: 1) taking another recertification exam every 10 years; 2) the collaborative maintenance pathway — a collaboration between ACC and ABIM, which includes evaluation, learning and a certified exam each year; or 3) longitudinal knowledge and exam — in which the program interacts with the clinician on an ongoing basis, sending secured questions regularly. 

All three of these pathways for maintenance of certification involve high stakes questions and a set bar for passing or failing. 

Under the proposed new cardiology board, an initial certification exam would still be required after fellowship training, but the maintenance of certification process would be completely restructured, with the new approach taking the form of continuous learning and exam of competency. 

"This is an iterative process, but we envision with a new American Board of Cardiovascular Medicine, we will pick up where the ABIM left off," Kuvin notes. "That includes an initial certifying examination for the five areas that already exist under the ABIM system but with the opportunities to expand that to further specialties as well."

He points out that there are several areas in cardiology that are currently not represented by these five areas that warrant some discussion, including multimodality imaging, vascular heart disease, and cardio-oncology. 

"At present, everybody has to pass the general cardiology exam and then some may wish to further train and get certified in one of the other four other specific areas. But one topic that has been discussed over many years is how do we maintain competency in the areas in which clinicians practice over their lifetime as a cardiologist," Kuvin commented. 

He said the proposed cardiology board would like to adhere to some basic principles that are fundamental to the practice of medicine. 

"We want to make sure that we are practicing medicine so that our patients derive the most benefit from seeing a cardiologist," he said. "We also want to make sure, however, that this is a supportive process, supporting cardiologists to learn what they know and more importantly what they don't know; to identify knowledge gaps in specific area; to help the cardiologist fill those knowledge gaps; to acknowledge those gaps have been filled; and then move on to another area of interest. This will be the focus of this new and improved model of continuous competency."

The proposed new board also says it wants to make sure this is appropriate to the area in which the clinician is practicing.

"To take a closed book certified exam every 10 years on the world of cardiology as happens at the current time – or the exams conducted in the other two pathways – is often meaningless to the cardiologist," Kuvin says. "All three current pathways involve high stakes questions that are often irrelevant to one’s clinical practice." 

"The crux of the changes we are proposing will be away from the focus of passing a test towards a model of helping the individual with their competency, with continuous learning and evaluation of competency to help the clinician fill in their knowledge gaps," he explains.

He described the new approach as "lifelong learning," adding that, instead of it being "a punitive pass/fail environment with no feedback, which causes a lot of discontent among clinicians," it will be a supportive process, where a clinician will be helped in filling their knowledge gaps. 

"I think this would be a welcome change not just for cardiology but across medical specialties," Kuvin said. 

He also pointed out the ABMS itself is considering a continuous competency approach, and the proposed new cardiology board aims to work with the ABMS to make sure that their goals of continuous competency exam are matched. 

"The world has changed. The ability to access information has changed. It is no longer imperative for a clinician to have every piece of knowledge in their brain, but rather to know how to get knowledge and to incorporate that knowledge into clinical practice," Kuvin noted. "Competency should not involve knowledge alone as in a closed book exam. It is more about understanding the world that we live in, how to synthesize information, where we need to improve knowledge and how to do that." 

Kuvin acknowledged that asking clinicians questions is a very helpful tool to identify their knowledge base and their knowledge gaps. "But we believe the clinician needs to be given resources – that could be a conference, an article, a simulation - to fill that knowledge gap. Then we could ask clinicians some different questions and if they get those right then we have provided a service." 

Tactile skills for cardiologists needing to perform procedures – such as interventionalists or electrophysiologists may be incorporated by simulation in a technology-based scenario.

On how often these exams would take place, Kuvin said that hadn't been decided for sure. 

"We certainly do not think an exam every 10 years is appropriate. We envision, instead of an episodic model, it will be rather a lifelong journey of education and competency. This will involve frequent contact and making sure knowledge gaps are being filled. There are criteria being set out by the ABMS that there should be a certain number of touch points with individuals on an annual as well as a 5-year basis to make sure cardiologists are staying within specific guardrails. The exact nature of these is yet to be determined," he said. 

Kuvin added that it was not known yet what sort of hours would be required but added that "this will not be a significant time burden."

The application to the ABMS for a separate cardiology board is still ongoing and has not yet received formal acceptance. Representatives from the five US cardiovascular societies are in the initial stages of formulating a transition board. 

"The submission to the ABMS will take time for them to review. This could take up to a year or so," Kuvin estimates. 

This is the first time the ABMS has entertained the concept of a new board in many years, he noted. "It will be a paradigm shift for the whole country. I think that cardiology is really at the forefront and in a position where we can actually do this. If cardiovascular medicine is granted a new board, I think this will help change the approach of how physicians are assessed in terms of continuous competency not just in cardiology but across all specialties of medicine."

He added: "We are confident that we can work within the construct of the ABMS guidelines that have been revised to be much more holistic in the approach of continuous competence across the board. This includes thinking beyond rote medical knowledge and thinking about the clinician as a whole and their abilities to communicate, act professionally, work within a complex medical system, utilize medical resources effectively. These all have to be part of continuous competence."

Noting that the ABIM has received criticism over the costs of the certification process, Kuvin said they intend to make this "as lean a machine as possible with the focus on reducing the financial [burden] as well as the time burden for cardiologists. It is very important that this is not cumbersome, that it is woven into clinical practice, and that it is not costly." 

But he pointed out that building a new board will have significant costs. 

"We have to think about developing initial board certification examinations as well as changing the paradigm on continuous certification," he said. "This will take some up-front costs, and our society partners have decided that they are willing to provide some start-up funds for this. We anticipate the initial certification will remain somewhat similar in price, but the cost of ongoing continuous competency exam will be significantly reduced compared to today's models."

Kuvin said the collaboration of the five participating US cardiovascular societies was unprecedented. But he noted that while the transition board is beginning with representatives of these individual societies, it will ultimately be independent from these societies and have its own board of directors. 

He suggested that other societies representing other parts of cardiology are also interested. "Cardiology has recognized how important this is," he said. "Everybody is excited about this."

DMEGC Solar obtains extended stress tests certification from TÜV Rheinland

The updated IEC 63209-1:2021 specifies the test methods and requirements for ground-mounted solar modules, including maximum power point tracking tests, performance tests, environmental adaptability tests, safety performance tests, and durability tests.

DMEGC Solar added that its n-type modules boasted a decay rate “much lower than the IEC’s 5% standard”. The decay rates under all basic and intensified test sequences such as were within 2%, with PID performance even lower than 0.6%.

TÜV Rheinland also announced that it will begin solar testing in the US by the end of this year.

Earlier this year, DMEGC Solar started commercial operations at its new Lianyungang manufacturing base in eastern China, which boasts an annual module production capacity of 5GW.

The plant is the company’s first to be built in the city of Lianyungang, and brings its total annual module production capacity to 12GW. The factory will primarily produce a new type of panel, a bifacial tunnel oxide passivated contact (TOPCon) module that boasts a maximum power output of 630W and a conversion efficiency of 22.54%.