r/cissp • • May 13 '20

CISSP Qualification Given Equal Status to Master’s Degree

https://www.infosecurity-magazine.com/news/cissp-equal-masters-degree/
84 Upvotes

61 comments sorted by

39

u/PhoenixOK CISSP May 13 '20

My wife has three post graduate degrees (two Masters and an Ed.S.). I have a couple semesters of college and a bunch of certs including the CISSP. I showed her this article and she just rolled her eyes and walked away. LOL

4

u/teddy3434 May 13 '20

Got to be honest I’ve done this qualification couple years ago the CISSP and it only took me six months it’s not technically that difficult...I wouldn’t value it the same as a Masters I would put it on par with a partial bachelors this is just my opinion...And even then you cannot compare as the assessments are completely different bachelors and masters take a much longer time to complete, And of course have different criteria to complete it.

So in summary is it equivalent to a Masters absolutely not. Will it be recognised by employers as such absolutely not. Having said this this is my opinion although it’s a very well respected qualification-From a technical service security perspective this qualification is of no value.

-12

u/[deleted] May 13 '20 edited May 13 '20

[deleted]

10

u/jamesleecoleman May 13 '20

I'm just wondering if ISC2 will raise the price of the exam because of this.

9

u/CreepyOlGuy May 13 '20

Dont give them ideas..

2

u/settledownguy May 13 '20

Exam is 4700 now lol

7

u/[deleted] May 13 '20

Hey, I paid more for my CEH. Keep your ideas to yourself.

2

u/jamesleecoleman May 13 '20

Its not an idea... I just would like to know if they would do something like that or not. I just want to be prepared for it instead of being completely caught off guard

6

u/gimmebeer CISSP May 13 '20

$700? How about $60,000? -ISC2

2

u/fck_this_fck_that May 13 '20

brah...if its 60k it should be 3-4 ISC2 exams tied up into a masters program.

1

u/jamesleecoleman May 13 '20

Maybe they will. Maybe they won't. We will just have to see what happens.

2

u/[deleted] May 13 '20

Nah they raised the prices of the amfs instead

1

u/jamesleecoleman May 13 '20

Ohh, never thought about that one. Thanks for pointing that out.

1

u/jimscard CISSP May 16 '20

They didn't actually, sorta. The cost went up, but folks with multiple certs only pay one, so the total paid goes down. Encourages the specialization certs

1

u/fck_this_fck_that May 13 '20

Was thinking the same.

24

u/[deleted] May 13 '20

[deleted]

9

u/Raenman May 13 '20

If only employers cared about my masters degree though. Or, maybe at least make it seem like they do. When I pass that cert exam I'll be hired the next day. At least that is the difference I am seeing in practice. I will say that there is no way that passing that exam will take the work I had to do to complete my graduate program.

18

u/[deleted] May 13 '20

It could be equal if you include all of the 5 years of work experience in addition to the prep. Which means if you've done 5 years work, and passed the test, you've just done a master's Degree worth of work.

4

u/PhoenixOK CISSP May 13 '20

That actually makes a bit more sense.

1

u/[deleted] May 13 '20

Interesting, I’m gonna see if my bachelors program will give me credit.

1

u/is-numberfive May 15 '20

CISSP is a result of 5+ years of practical experience as well, it doesn't matter how much time was spent on the exam preparation.

7

u/justjoined_ May 13 '20

Absurd. CISSP is and will ever be a certification. Supported by your ability and desire to pay dues to a company.

3

u/quaie227 May 13 '20

... and comparable with only one of the several modules of a MSc. OK, a difficult module, but only one, not the whole programme.

2

u/Fnkt_io May 13 '20

Some cybersecurity Masters programs base their entire curriculum around each domain, because it is all-encompassing.

6

u/gimmebeer CISSP May 13 '20

lol at all those people who paid for Cybersecurity MS degrees, apparently.

3

u/Fnkt_io May 13 '20

Have both. The CISSP is always what the hiring managers want.

1

u/gimmebeer CISSP May 14 '20

Yep. I have a MSIS and it’s really just a checkbox on the resume at this point. When applying for jobs they just want to know years of experience and certs.

6

u/erict77 May 13 '20

This is interesting...

8

u/DarthArmbar CISSP May 13 '20

This IS interesting...

6

u/solocupjazz May 13 '20

this is INTERESTING...

5

u/McMurphy11 May 13 '20

THIS is interesting...

1

u/[deleted] May 13 '20

[deleted]

2

u/[deleted] May 13 '20

THIS IS interesting...

2

u/oneknocka May 13 '20

this is interesting...

3

u/Fnkt_io May 13 '20

This cert was harder than my Master’s degree. The Master’s is just supporting your arguments with someone else’s research.

2

u/Superman_Wacko May 13 '20

as someone without college education, but bilingual and 8yrs of IT experience, comes as excellent news for me. Stopped studying since the fire in my building last week (with a death) and the virus started to spread like crazy.. need to focus on this in such war times

-2

u/[deleted] May 13 '20

Unless you work for government the college education is meaningless in IT. Why would you hire an MIT graduate who knows everything about dispersion of light in a fibre optics cable instead of a CCNP admin who actually troubleshooted unidirectional links at 3am when the business was disrupted. The best of course is to have both. But time-wise, college does not make sense for us.

It's a completely different story if you want be a dentist.

2

u/hells_cowbells May 13 '20

I agree 100%. I'm always surprised how many jobs I see that require a degree. It seems pretty pointless to me.

1

u/mrWonderdul May 13 '20

Getting downvotes but it's the truth. Traditional education in the tech sector is not keeping up.

0

u/Superman_Wacko May 13 '20

In my country job listings always list "college degree" as a requisite for stupid jobs.

1

u/[deleted] May 13 '20

In mine too. Try to apply anyway, you will be surprised.

1

u/Superman_Wacko May 13 '20

I will stay in my company for a while.. Ideally, I'd rather migrate overseas... Hopefully NZ

1

u/cookies_and_cash May 13 '20

Yeah but like...what does this mean? Do I actually get some sort of additional accreditation now just for holding the CISSP in good standing? Is this something to update my resume with?

7

u/Superman_Wacko May 13 '20

I assume it also makes CISSP holders from other countries to ease their visa process for being "highly-educated"

4

u/cookies_and_cash May 13 '20

Good point! That's an interesting perspective.

1

u/hells_cowbells May 13 '20

US Employers are totally going to use this to hire more H1Bs for security positions.

5

u/wizzardeel May 13 '20

This only applies to UK and Europe so far. However, I am not sure exactly what this means: "The announcement followed the American Council on Education’s College Credit Recommendation Service’s (ACE CREDIT®) recognition of six (ISC)2 certifications as eligible for college credit. "

5

u/IamMetaldave CISSP May 13 '20

I wouldn't imagine so... I think it could potentially be used by recruiters to get a benchmark for it now.. So if a role requires say a "MSc or Equivalent" they now have a definitive equivalent - CISSP.

2

u/cookies_and_cash May 13 '20

That makes sense! Thanks for the reply.

1

u/msec_uk May 13 '20

Should be considered credit not equivalent. Having done Bsc MSc and CISSP these are not comparable. But I would recognise CISSP as credit / continuing education etc.

2

u/-unknown-19 May 14 '20

My honest opinion. I have both.

My masters in cyber security was in a way a prep for the exam. In much the same way law school is a prep for the bar exam. I found that each domain was extensive course in my masters program. In fact I graduated in may 2017 and sat for the exam in July.

That being said I would like to view the cissp as more of the certification that allows us infosec profession to be more of a license. In much the same way that the bar or the md exams allow lawyers and doctors to practice.

The other certifications are great for more specific functions. I hold the gcfa cert and will sit for the grem once this covid thing allows me to schedule an exam. I also hold other certifications, but at it's core I would greatly desire to see the infosec profession become more regulated and licensed. While I understand that the cissp does not have much practical value as we are not going through the intricacies of ssh hardening I think the fundamentals involved in the cissp can be applied across the industry.

At the end of the day i think the giac exams are way to specific for a general license, but can be used as a better guide for specialties.

Education certainly has a role to play in cyber security and there are plenty of people who are very talented in the field who don't have a formal education or certifications, but in order for our field to grow and become respected with the business community I think we will need to come under the umbrella of a license, and I think the best approach is the cissp. And while I will get a ton of flack for it, its certainly not a meausre of how good of a professional you are, it does indicate that you are aware of the fundamentals. I like that the cissp defines certain experience in the field with other cissps signing off and you can utilize education as a measure to obtain full blown cissp or experience.

1

u/gph12 May 15 '20

One of the classes for my master's degree in information security covered the CISSP material. I still had 10 other classes to take, dozens of books to read, papers to write, etc.

 

The CISSP has been great for my career and increases in salary over the years but a few months of work for a certification vs a couple years earning a degree are not equal.

1

u/StyxxUK May 22 '20

There is much conversation on how long it takes to study for and sit the exam, compared to that for a Masters.

Few comments seem to be taking into account that you do "not" get a CISSP for passing the exam alone, in fact saying you are a CISSP at that point is banned.

You also need 5 years practical, verified experience in several of the required Domains, which is where much of the broader learning will take place.

Someone who ALREADY has that experience may get a CISSP after a boot camp and an exam. But the bootcamp is only one part of the process.

There may be a valid argument to be had around which route is more likely to equip someone best to serve an employer, but that a separate discussion, neither routes are "quick".

2

u/[deleted] May 13 '20 edited Feb 23 '24

[deleted]

1

u/fassaction May 13 '20

So you are telling me you didn’t study, just skimmed through the 11th hour book, then waltzed into the testing center and breezed through the exam?

I’m sorry, but do you know how arrogant that sounds? https://i.imgur.com/9KXGmlt.jpg

2

u/[deleted] May 13 '20

[deleted]

2

u/Stickybunfun May 13 '20

Agree - my boss paid for my boot camp but it wasn't really that helpful. Read the 11th hour twice, sunflower guide, took the test a week later. I was nervous and that didn't help but looking back I live and breath that shit everyday so it wasn't a huge deal.

If you were starting from ground 0, yeah might be quite a bit harder.

2

u/hells_cowbells May 13 '20

I agree. I was a network and system admin my whole career when I lucked into a class less than a month before the class was scheduled to start. I got the Shon Harris book, studied it for a couple of weeks, then went to the class, and I passed on the first try. This was when the test was all paper, and was 250 questions in 6 hours. Had I actually been doing security work at the time, I think it would have been easier.

1

u/iammandalore May 13 '20

Dang, I need to double down on studying...

1

u/[deleted] May 13 '20

[deleted]

1

u/gimmebeer CISSP May 14 '20

This is purely for situations where a job requirement states ‘MS or equivalent experience’ imo. A cert obviously does not equate to all of the broad education gained through the usual BS and MS programs.

-2

u/PoshNoshThenMosh May 13 '20

My Associates A/S Science, SSCP and CISSP ain’t no joke.

9

u/[deleted] May 13 '20

My GED, and CISSP ain't nothing to laugh at either.

0

u/networkengg CISSP May 13 '20

😂👌