After the Examination

After passing the CISSP examination, you must submit a qualified third-party endorsement (from another CISSP, your employer, or any licensed, certified, or commissioned professional — such as a banker, attorney, or certified public accountant) to validate your work experience. This endorsement must be submitted within 90 days of your exam; otherwise your application and exam results are voided. (ISC)2 randomly audits a percentage of submitted applications, requiring additional documentation (normally a résumé and confirmation from employers of work history) and review by (ISC)2. Within one business day (seven business days, if audited) after it receives the endorsement, (ISC)2 normally sends final notification of certification via e-mail.

After you earn your CISSP certification, you must remain an (ISC)2 member in good standing and renew your certification every three years. You can renew the CISSP certification by accumulating 120 Continuing Professional Education (CPE) credits or by retaking the CISSP examination. You must earn a minimum of 20 CPE credits during each year of your three-year recertification cycle. You earn CPE credits for various activities, including taking educational courses or attending seminars and security conferences, belonging to association chapters and attending meetings, viewing vendor presentations, completing university or college courses, providing security training, publishing security articles or books, serving on relevant industry boards, taking part in self-study, and doing related volunteer work. You must document your annual CPE activities on the secure (ISC)2 website to receive proper credit. You also have to pay an $85 annual maintenance fee, payable to (ISC)2. Maintenance fees are billed in arrears for the preceding year, and you can pay them online, also in the secure area of the (ISC)2 website.

See Chapter 3 for more information on earning CPE credits and maintaining your CISSP certification.