We go to the places where people are certified and we try to recruit them.???Getting the CISSP requires passing a written exam that covers subjects including access control, telecommunications and network security, and security architecture and design, according to the SANS Institute, which offers a preparation course for the test.???That would then kind of push you into that realm of management,?