CISSP — Certified Information Systems Security Professional
A broad security management credential requiring five years of experience. Adjacent to forensics rather than part of it, and included here so readers can tell the difference.
Type: CertificationWorking practitionersLawyers & in-house counsel
Offered by ISC2
The facts
- Cost
- Widely reported at $749 for the exam with a $135 annual maintenance fee, but ISC2's own pages we could read did not display those figures, so treat both as unconfirmed by primary source and check ISC2 directly.Figure read 2026-09-12 from www.isc2.org/certifications/cissp
- Prerequisites
- Five years of cumulative, full-time experience in two or more of the eight CISSP domains. Up to one year is waivable with a qualifying four-year degree or an approved credential. Passing without the experience yields Associate of ISC2 status, valid six years.
- Format
- Computerised adaptive testing: 3 hours, 100-150 multiple-choice and advanced-format questions, pass mark 700 of 1000 scaled points, with performance required across all eight domains.
- Length
- A single three-hour adaptive exam.
- Renewal
- Annual maintenance fee plus continuing professional education credits on ISC2's cycle.
- Accreditation
- ISC2 certifications are long-established and widely referenced in government hiring frameworks. We did not independently verify the CISSP's current DoD 8140 baseline listing, which sits behind an authentication gate.
- Who it suits
- A forensic consultant or lab manager moving toward advisory and governance work, or a lawyer who wants to understand what the credential opposing counsel's expert holds actually proves.
- Audience
- Working practitioners · Lawyers & in-house counsel
- Official page
- www.isc2.org/certifications/cissp
Strengths
- The strongest general signal of information-security management competence, which helps a forensic consultant who also advises on programme and governance.
- The five-year experience requirement means it cannot be bought by someone with no track record, which is more than can be said for several forensics credentials.
- Useful credibility for a testifying expert whose opinion touches reasonableness of controls rather than only artefact analysis.
Limitations
- It is not a digital forensics certification and none of its eight domains centres on forensic examination technique or evidence handling. Listing it as a forensics credential — as some directories do — is misleading.
- Multiple choice and adaptive: it tests breadth of knowledge, not demonstrated examination skill.
- The five-year experience bar excludes exactly the career changers who most want it.
- Its cost figures are not published where we could read them, so the commonly quoted $749 and $135 should be confirmed before you rely on them.
Sources
Costs, prerequisites and exam formats in this field change often, and several providers price by region, cohort or employer agreement. Every figure on this page carries the date it was read and a link to the page it was read from. Confirm current terms with the provider before you spend anything.