I passed CISSP. The day after, nothing changed. Same meetings, same pay, same expectations. And that's fine, because the cert wasn't the thing that made me good at the job. It confirmed something that was already there.
The first attempt
I took CISSP the first time arrogantly. Very little prep, and the prep I did do wasn't good. I'd put the cert on a pedestal, heard how tough it was, heard how few people pass, and somehow convinced myself I'd walk it anyway. Both things at once.
I sat down at the test centre and had no idea what I was looking at. The questions weren't testing what I'd revised. I left with a headache, knowing full well I'd failed before I'd even picked up the print-out at reception. I sold the official book on the way home and didn't think about CISSP again for two years.
The second attempt
I bought the same book again, the one I'd sold. A dry read, but for me it had everything in it. I added one of the well-known YouTube resources to round the prep off, and that combination did the job. I gave up my evenings, my weekends, and my wife. Joking aside, she was hugely supportive, which is the only reason any of this happened.
Second time round it wasn't quite the same bewilderment. I knew what I was doing. The questions felt progressively harder until they plateaued, and every one of them felt like a puzzle. I walked back to reception with the same headache, still not really sure how it had gone. I'd passed.
The day after
A few people who knew how much it meant to me sent congratulations. I had a real sense of achievement, the kind that takes months of evenings and weekends to earn. Then Monday arrived. Same standup. Same backlog. Same calendar. Same pay. Nobody at work made a fuss. The architect role didn't open up. The recruiters didn't start ringing.
And that was fine. It just wasn't what some part of me had been quietly expecting.
What I'm proud of
I love having the letters on my CV. The certificate is on the wall. A lot of evenings went into it and I'm not going to be cool about that. CISSP is a serious exam, ISC2 run it well, and the people I've worked with who hold it have, in my experience, mostly earned it. None of what follows is me having a go at the cert.
What the cert actually was, for me
The thing I had to be honest about, after the fact, was what the cert had really done. It hadn't made me better at my job overnight. It hadn't given me a new skill I didn't have on the Friday before. The work I was already doing, the decisions I was already making, the way I was already thinking about risk and architecture, all of that was the same on the Monday after.
What the cert did was put a recognised stamp on it. It made the thing legible to people who didn't work with me day to day. Recruiters. Hiring managers two layers removed. Procurement teams reading a statement of work. The cert wasn't the substance. It was the receipt.
Where it shows up, on the slow clock
Look at it on an eighteen-month horizon instead of a thirty-day one. Recruiter inbound shifts. Shortlists shift. Conversations about senior, lead or principal get easier to start, because the box-tick excuse for not having them goes away. The salary thing is real but lumpy. It rarely shows up as a raise at your current job. It shows up as a better number on the next offer, if you actually go and have that conversation.
None of that is the cert making you good. It's the cert making the good already there easier for other people to see.
What I'd tell myself on that Monday
Don't wait for the cert to do something to you. It won't. Don't sign up for the next one the week after passing, either. That reflex is usually procrastination dressed up as ambition. Let the first one do its quiet work before you ask the second one to.
And take the achievement seriously. The effort was real. The flat Monday doesn't cancel that out. They're both true at once.
The bit that took me a while to land on
Passing CISSP didn't create any of what came after. It confirmed something that was already there. The good decisions, the years on the job, the way I'd learned to think. The cert put a name on it, and the name turned out to be useful. That's it. That's the whole thing.
Where this connects on POST
For whether to sit it at all, the CISSP worth-it piece is the right one. For the broader pattern of certs as direction rather than competence, certifications prove direction sits next to this. And if the "nothing happened" feeling is really about the move you haven't made yet, the Guided Route is more useful than another study plan.