Ask The Information Security Expert: Questions & Answers

What is the GISP certification and how does it compare to the CISSP certification?

What is the GISP certification and how does it compare to the CISSP certification?

By  Mike Rothman, past SearchSecurity.com expert, President and Principal Analyst, Security Incite

searchSecurity.in

What is the GISP certification and how does it compare to the CISSP certification?
Honestly, I didn't know what the GISP certification was prior to this question, so thanks for forcing me to broaden my horizons a bit. The GISP certification comes from the SANS institute and is analogous to the (ISC)2's CISSP certification. Both are termed "intermediate"-level certifications and indicate a broad (though not necessarily deep) understanding of information security topics.

In fact, SANS offers a training course specifically for the CISSP exam that can also be used to prepare for the GISP test. Since there is a lot more name recognition for the CISSP (as opposed to the GISP), why bother with the GISP?

The only time it's worthwh

To continue reading for free, register below or login

Requires Membership to View

To gain access to this and all member only content, please provide the following information:

By joining searchSecurity.in you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.

TechTarget cares about your privacy. Read our Privacy Policy

ile to consider the GISP is if you can't qualify for a CISSP, which usually means a lack of experience. The CISSP requires four years of relevant work experience, which a lot of people may not have. Thus the GISP becomes a potential substitute, for a couple of years anyway.

Though as I've written many times in the past, certifications don't necessarily indicate competence.

More information: