Which certification should an IT security specialist aim for: CISSP or T.I.S.P.?
Characteristics of the CISSP:
- Higher requirements for professional experience, usually 5 years.
- The professional experience and basic professional qualification must be endorsed by another CISSP (there are exceptions)
- Internationally oriented; the focus on American laws is declining or has already declined.
- Includes aspects of secure software development.
- Is internationally recognized.
- Exam preparation is up to each candidate. A training course is not a must.
- Is generally broader in scope.
- Continuing education must be demonstrated on an ongoing basis to maintain the certification.
- The CISSP is accredited according to ISO 17024:2003.
Characteristics of the T.I.S.P.
- Lower requirements for professional experience, only 3 years.
- Only recognized in Germany (or perhaps in the rest of the DACH region).
- A training course is mandatory.
- Currently three training providers: Fraunhofer SIT, secorvo and isits.
- Slight focus on "German topics" such as the BSI, BDSG, etc.
- No aspects of secure software development.
- Here too, continuing education must be demonstrated to maintain the certification, but the required effort is somewhat lower.
- In addition, a TISP community meeting must be attended once every three years.
- Accreditation according to ISO 17024:2003 is not available.
Having both certifications myself, I would prefer the CISSP over the TISP. Its internationality clearly outweighs the few specifically German topics of the TISP. You can always treat yourself to the BDSG & Co. as bedtime reading on top of the CISSP. I also consider it an advantage not being forced to attend a preparation course, as is necessary for the TISP. Depending on your own level of knowledge and professional experience, that can be an outright waste of time and money. In my view, the TISP is only advantageous if you do not have the professional experience required for the CISSP and would like to - or have to - take a course anyway. Especially since the TISP preparation courses are cheaper than the CISSP bootcamps.