Skip to content
CertMapCertMap

CISSPISC2 Certified Information Systems Security Professional

ISC2Personnel certification (ISO 17024)Leadership

Created per CertMap methodology · Updated 12 May 2026 · About the editorial team → · Official page ↗

▾ Jump to …7 sections

What is CISSP?

The Certified Information Systems Security Professional (CISSP) from ISC2 is considered the gold standard among generalist certifications in information security and is one of the most frequently required qualifications in job postings worldwide. It covers eight domains – from cryptography and network security to software development security – demonstrating broad conceptual competence. The CAT-based exam (125–175 questions) is challenging; 5 years of relevant practical experience are mandatory. The CISSP is particularly suited for mid-to-senior-level professionals pursuing a general security leadership role. Critics occasionally note that it sacrifices technical depth in favor of breadth.

Suitable for

CISO
Information Security Manager
Security Architect
Security Consultant
IT Security Director

Quick facts

AccreditationISO/IEC 17024 by ANAB
Languages
RecognitionGlobal

CertMap assessment & background

Der CISSP ist seit über zwei Jahrzehnten der am häufigsten genannte Generalist-Standard für Security-Führungsrollen im DACH-Markt. Praxis-Erfahrung in mindestens zwei von acht Domains ist Pflicht, der ISC2-Endorsement-Prozess verlangt eine Referenz aus dem eigenen Berufsumfeld. Aus CISO-Perspektive deckt er Breite zuverlässig ab, ersetzt aber keine domänenspezifische Tiefe. Wer eine technische Spezialrolle anstrebt (Pentest, AppSec, IR), profitiert oft erstmal von einem fokussierten Zertifikat. Die jährliche AMF (125 USD) gilt zusammen mit allen weiteren ISC2-Certs, was das Ressource-Bundle attraktiv macht, wenn man später SSCP oder CCSP nachzieht.

More on CertMap editorial methodology →

Cost, prerequisites, exam & renewal

Cost over 5 years

Exam fee (acquisition)€689
AMF (5 years)€621
CPE time value (5 years)€16,000
5-year total€17,310
CPE effort: 40 h per year · 200 h over 5 years · Valued at 80 €/h.
How is TCO calculated? →

CertMap score and matching roles

Rating

Market recognition
3/3
Scheme quality
3/3
Practice evidence
2/3
Maintenance
3/3

Marktstärke maximal: Schema-Qualität 3/3 durch ISO/IEC 17024 plus ANAB-Akkreditierung, Markt-Anerkennung 3/3 in globalen Stellenausschreibungen. Substanz solide bei 5/6: Pflege regelmäßig aktualisiert, Praxis-Nachweis 2/3, weil der Pflicht-Endorsement-Prozess durch Bestandsmitglieder keine praktische Lab-Prüfung ersetzt.

Matching NICE roles

Oversee and GovernSystems Security Management
Oversee and GovernExecutive Cybersecurity Leadership
Design and DevelopCybersecurity Architecture
Design and DevelopEnterprise Architecture
Design and DevelopSecure Software Development
Design and DevelopSecure Systems Development
Design and DevelopSoftware Security Assessment
Design and DevelopSystems Requirements Planning
Design and DevelopSystems Testing and Evaluation
Design and DevelopTechnology Research and Development

What are NICE roles? The framework explained →

How to prepare

Our editorial recommendation to get started: freely accessible, no paid placement, no affiliate links.

Pete Zerger – CISSP Exam Cram Full Course (All 8 Domains)

Free complete CISSP video course by Pete Zerger (Inside Cloud and Security); the link opens the full "CISSP Exam Cram 2026" playlist including addendum and strategy videos.

Watch on YouTube ↗ · checked on Aug 19, 2026

Curated, not sponsored: the recommendation is chosen editorially and cannot be bought. Official provider materials are available via the certification page link at the top of this page.

About ISC2

ISC2 (vormals (ISC)²) ist eine 1989 gegründete, gemeinnützige Standardisierungs-Organisation für Cybersecurity-Zertifizierungen mit Sitz in Florida und über 600.000 Mitgliedern weltweit. Die Cert-Familie (CISSP, CCSP, SSCP, HCISPP) ist nach ISO/IEC 17024 akkreditiert; die jährliche AMF (125 USD) deckt alle ISC2-Zertifizierungen gemeinsam ab. ISC2 betreibt zusätzlich ein eigenes Continuing Professional Education (CPE)-Programm zur Aufrechterhaltung der Mitgliedschaft.

More certifications

From the knowledge base

View all articles →
Comparisons

CISSP or CISM? Two Careers, One Decision

Both require five years of experience, both cost roughly the same at first glance. Yet CISSP and CISM lead to different professions. The comparison with the numbers that course providers don't show.

8 min read
Comparisons

CISSP or TISP? One Builds, the Other Governs

Both are considered heavyweights for experienced security professionals, yet they target different kinds of work: the CISSP centres on designing and building secure systems, the T.I.S.P. on oversight, assessment, and governance within the German regulatory framework.

7 min read
Comparisons

CISM or CISA? Two ISACA paths, one directional decision

Both come from ISACA, both require five years of experience, and both cost almost the same. The difference is not the price but the role: managing or auditing. The comparison with the numbers and the role mapping.

7 min read
CISSPView in quadrant ↗