CISSP: What It Verifies

CISSP — Certified Information Systems Security Professional — is (ISC)²'s credential for security leadership and architecture, not hands-on tooling. It covers eight domains: security and risk management, asset security, security architecture and engineering, network security, identity and access management, security assessment and testing, security operations, and software development security.

What it verifies

CISSP confirms someone can reason across a security program end to end — policy, architecture, and operations together — rather than one narrow skill. (ISC)² requires 5 years of cumulative paid work experience in 2 or more of the 8 domains to sit the exam (4 years with an approved degree or credential waiver).

Who typically holds it

On the calibre° roster, CISSP shows up on senior and executive roles where security decisions carry organizational weight: Risk Engineer and CISO (Fractional). It's a management-and-architecture credential, not a substitute for a hands-on cloud or platform certification — those are listed separately per role.

How calibre° verifies it

Self-reported CISSP status isn't accepted. Every claim is checked against (ISC)²'s member verification before an engineer is roster-eligible — the same primary-source standard applied to every certification calibre° lists. Full procedure: Verification.