Discussion on:

Six tips for finding quality CISSP training

Sorry about going off course here but is it no longer possible to save article on Tech Republic?

You can save a shortcut to http://techrepublic.com.com/5100-6262-5061018.html?tag=sc to allow convenient unrestricted guest access to non-members.

I have been trying to get TechRepublic to fix the links in the first article of this series, "Security certs may be mandatory for IT pros in financial and healthcare fields", so far no luck. Would you consider posing a link to an outside source like you did with the article on CISSP exam prep options? I only got to read page 1 and no matter what I tried or my two contacts with TechRepublic, I can't see any further portions of the article and would really like to see the whole thing as it is extremely relevant to my profession. I am an IT person in the medical realm - HIPAA is obviously a very big part of our professional lives. Thank you.

I recently attended an Extreme School training session for CISSP certification. 5 days of training on CBK, 1 day of review and then the exam on the 7th day. I'm glad to say I passed the exam.

Please excuse my ignorance, but what is the CISSP cert designed for? I'm not familiar with it. Is it designed more for consultants, ISP engineers, or your everyday network admin (like me). Is it considered very high-level (like Cisco CCIE)? Again - I apologize for the ignorance!

--TF

CISSP certifications specializes in the area of information security. CISSP stands for Certified Information Systems Security Professional. In my opinion, it cannot compare to the technical expertise of a CCIE (however, you do have CISSP that are very technical). Check the link below for more info and the testing requirements and experience qualifications prior to testing (very extensive).

https://www.isc2.org/cgi-bin/index.cgi

Hope this helps.

Here is a seventh tip for finding quality CISSP training: Do your own study.

One subject NOT mentioned anywhere in the article written is the fact that attending formal classes is NOT a must to pass this exam.

If you have experience in the field you can definitively study this exam on your own and pass it successfully like thousands of others have done already.

The CISSP and SSCP Open Study Guides web site at http://www.cccure.org has all that you need to do it on your own. It has practice questions that have been rated the best that exist by Information Security magazine and the quiz engine is more intelligent than most commercial quiz out there. Did I mention that it is totally free as in nada, nothing, gratuitos, rien.

However, self study requires on key item: DISCIPLINE. If you can't find the time or the energy to do it on your own, you should definitively look at getting some training.

Another factor I do look at for the training is what type of support is behind the vendor courseware. The CBK has regular changes, you need an active team that maintains it's courseware to be in line with the CISSP. When was the last revision done on the courseware you are about to get?

If you are still unsure about doing your own training or attending a formal class, simply visit the www.cccure.org web site, at the top of the main page you will see the Quizzes menu, take a 125 questions quizz on the 10 domains and see how well you are doing before even studying anything. The results will tell you which of the domains needs more work.

Good luck to all

Clement Dupuis, CD
cdupuis@cccure.org
Maintainer of the CISSP and SSCP Open Study Guide portal
http://www.cccure.org

You also need to consider your training discipline. To put the responsibility for training solely on the Instructor/Trainer's shoulders is irresponsible. You can have the most robust training materials and instruction in the world, but if that student spends next to no time with those materials obviously your chances of success have been DRASTICALLY reduced. Whether this lack of discipline is due to a hectic work schedule or poor training ethic it makes no difference. The CISSP certification is something that you have to PREPARE for. There is no easy way out regardless of how many companies offer "exam pass" guaranties, test taking "strategies" or "ISC2" certified instructors. The best way to find quality training for the CISSP is by word of mouth and reputation. All training companies are going to tell you that they are the best. If you ask your peers (those that have their cert and have actually prepared for the CISSP) and do solid research because training is an investment not just in money but time as well, you'll be just fine.

Also, experience is a key ingredient as well. The quick and dirty of it in qualifying for this exam is atleast five or more years experience in two or more of the Ten Domains of the CBK. There are other ways to qualify but I won't go into those otherwise this entry will be longer than it already is. If your just six months into the field with not so much as an A+ certification then the CISSP is not for you. Concentrate on an A+ or a Security+. It never hurts to crawl before you walk.

If you do qualify for this cert, preparation and training are key. If you find a training company that offers you an "easy" way out, that's a red flag right there because there is no brain dump for this cert. Even if you get lucky enough to pass this exam without training for it, your only a CISSP on paper and cannot perform your duties to a level expected of a CISSP.

I have recently decided to pursue a CISSP cert and therefore found the article useful although many of the points are common sense. Given these common sense tips paper was authored by an instructor for a company that sells CISSP training does however taint the motivation of the article.

I agree that the best way to find quality training for the CISSP is by word of mouth and reputation of the trainer. We should do solid research because training is an investment not just in money but also time and efforts.

To be a quality trainer, the trainer should:
> share certification & career path experience
> coach students actively and coordinates discussions
> share in-depth knowledge & working experience without hiding (that is why quality trainer is vital!!)
> share strategies of answering question & time management (particular this 6 hours CISSP Exam!!)
> encourge taking the certification exam (keep the desire in mind and get it done very soon!!)

For any discussion, please contact me at askdannyha@gmail.com or join my network at Linkedin
http://hk.linkedin.com/in/dannyhaprofile

Good Luck,
Danny Ha
CISSP Trainer in Hong Kong, 2011 Apr 20

The primary mistake that I see, and hear, happening are failures to manage expectations. The majority of training available is merely "review" seminars which highlight what someone should already have learned during their "5 years of experience". Unfortunately, many companies are guilty of advertising ploys to make customers believe, in the onset, that their training is the "end-all, be-all" route to certification. Potential trainees should be aware of this and prepare themselves accordingly.