CISSP – go or no go?