12.4. What Comes Next
After passing the CISSP:
Endorsement: You need a CISSP-certified professional to endorse your application within 90 days of passing. ISC2 will provide a process if you don't have a contact.
CPE requirements: 120 CPE credits over 3-year certification cycle to maintain. 15 CPE minimum per year. Track via ISC2's portal.
Continue building: The CISSP is a foundation. Relevant specializations depending on your career path:
- Cloud security: CCSP (ISC2) or AWS/Azure security specialty certifications
- Security operations: GIAC GCIH (Incident Handler) or GIAC GCFE (Forensics)
- Architecture: SABSA practitioner
- Privacy: CIPT or CIPM (IAPP)
- Red team / offense: OSCP, CEH
The broader mission: Security professionals protect people's data, privacy, and safety. The organizations you help secure employ people whose livelihoods depend on those organizations remaining viable. The certifications are credentials; the mission is larger than credentials.
This guide was created with a first-principles approach — not to help you memorize answers, but to help you understand security deeply enough to derive the right answer even when you've never seen the specific question before. That understanding is what a CISSP credential is supposed to represent. Go earn it.
