Every week I get asked: “Does MY experience count as work experience for the CISSP?”.
Many times it does. It is not just hands-on cybersecurity work, which it is, but it is also so much more.
Here is my current list of what others have used to fulfill their CISSP work experience requirements:
(This is not all encompassing, but it can give you an idea of how wide it can be.)
“As a security manager on various construction sites, my daily tasks involved setting up and monitoring surveillance systems to prevent theft and unauthorized access. I documented all incidents and coordinated with law enforcement when necessary. This role directly contributed to my Physical Security domain experience for the CISSP.”
“I’ve spent the last 5 years working as a night watchman at a large commercial facility. My duties included monitoring security cameras, conducting patrols, and responding to any security incidents. This experience helped me meet the requirements for the Physical Security domain of the CISSP.”
“My position in retail loss prevention involved managing surveillance systems and conducting security assessments to prevent theft, which covered Physical Security and Security Assessment and Testing.”
“As a Cyber Law Attorney, my focus was on data protection and compliance with cybersecurity regulations, which was applicable to the Security and Risk Management domain.”
“In my role as a healthcare facility security manager, I was responsible for securing patient data and ensuring compliance with HIPAA, which I applied to the Security and Risk Management and Security Operations domains.”
“My job with an airline involved managing security protocols for passenger screening and baggage checks, which covered the Physical Security and Security Operations domains.”
“I advised retail businesses on security measures, including theft prevention and digital security, which covered Physical Security and Security Assessment and Testing domains.”
“I conducted fire investigations, which involved both physical security measures and incident response planning, applicable to the Physical Security domain.”
“As an Event Security Manager, I focused on crowd control, access management, and emergency response plans, which was used for the Physical Security and Security Operations domains.”
“I worked as a Private Investigator, providing threat assessments and security consultations, which was relevant to the Security and Risk Management and Security Operations domains.”
“While working in logistics, I managed the secure transportation and storage of high-value items, which covered aspects of the Physical Security domain.”
“I managed the physical and digital security for a public library, including access controls and incident response, covering Physical Security and Security Operations domains.”
“I worked in a correctional facility, ensuring physical security measures and incident response, which was relevant to the Physical Security domain.”
“As a park ranger, I managed the security of public lands and facilities, focusing on access control and incident response, relevant to the Physical Security domain.”
“As a hospital administrator, I managed the security of patient data and physical security measures, covering Security and Risk Management and Physical Security domains.”
“My role involved securing food production facilities and supply chains, covering Physical Security and Security Operations domains.”
“In the automotive industry, I focused on securing manufacturing plants and connected car systems, covering Physical Security and Communication and Network Security domains.”
“As a project manager in construction, I focused on securing job sites and preventing theft, covering Physical Security and Security Operations domains.”
“I secured logistics infrastructure, focusing on protecting supply chains and facilities, which covered Physical Security and Security Operations domains.”
Candidates must have a minimum of five years cumulative, full-time experience in two or more of the eight domains of the current CISSP Exam Outline.
Full-Time Experience: Your work experience is accrued monthly. Thus, you must have worked a minimum of 35 hours/week for four weeks in order to accrue one month of work experience.
Part-Time Experience: Your part-time experience cannot be less than 20 hours a week and no more than 34 hours a week.
https://www.isc2.org/certifications/cissp/cissp-experience-requirements
Get certified, let me help,
Thor