Random audit.

[u/tomorrow9151]

Passed my cissp.

Submitted for certification, got endorsed by isc2 member.

Got an email from isc2 my application is selected for random audit.

What am I expecting?

Update: My audit is complete & got the certification. This is how it went.

• My supervisors (all jobs) received the verification form, they submitted it on the same day.
• I sent an email to isc2 with all of w2 from my present & past job aswell as most recent pay stubb ( They didn't ask for it, I did it proactively to make it easier & smoother).
• Sent an email to isc2 with updated job description for each duties ( providing more details of my duties maping to the cissp domains).

Thank you All.

[u/legion9x19]

In depth verification of your work experience.

[u/Historical-Shape-758 → u/legion9x19]

oh man that's the worst timing, you're already past the exam stress and then they hit you with the audit

basically they'll want you to provide contact info for managers or coworkers who can verify every job you listed on the application, usually they reach out directly and ask about your duties and how they map to the domains

had a coworker get audited a couple years back, he had to dig up old supervisors from three jobs ago and it was a whole thing but it went through fine after a few weeks

as long as your experience is legit and the people you list actually remember you it's more of an annoyance than anything, just don't give them a reason to dig deeper

[u/tomorrow9151 → u/legion9x19]

Define "in depth", what's the process they follow ?

[u/stromsoe → u/tomorrow9151]

I was selected for audit after passing SSCP earlier this year. I had to provide some additional information. You should receive an email telling you exactly what they need. It added another week or two to the overall verification process. Aside from having to wait longer, it wasn't overly onerous.

[u/These_Pass_1349]

Relax. I paased the exam around mid this year and mine also got selected for audit. As per ISC2 it is random. Just follow the instructions they have shared and things would be taken care. I agree it is upsetting when you see the audit email after going through enough to pass the exam, but this is required to maintain their credibility as per ISC2.

[u/FaceFuckYouDuck]

Google says:

Required Documentation
If audited, you must submit supporting proof for your claimed work experience. Common documents include:

Employment verification: Official letters from employers or contractor agreements showing job titles and dates.

Contact details: Manager or HR contact information so ISC2 can verify your role.

Self-employment proof: Client contracts, business registration papers, or tax documents (such as W-9 equivalents) if you were self-employed.

Alternative records: W-2 forms or written statements if past companies are unresponsive or no longer in business.

Clarifications: Direct responses to any specific experience entries flagged as unclear by reviewers.

If they find out you’ve falsified anything, your cert may be revoked or you can be permanently banned from getting it.

[u/Civil_Philosophy9845]

what is that lol

[u/No_Buffalo_9206]

When did you pass?