CCIE Sec
Cisco Certified Implementation Expert - Security
Cisco Certified Implementation Expert - Security
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Market signals
public, citable inputs to the recognition scoreEstimate from the broader CCIE program (~70k across all flavours; Security is one of 6 tracks).
› Built for these roles
› Exam format
8-hour lab exam (practical) + 2-hour qualification exam. One of the hardest network exams worldwide.
5-day wait between attempts (varies by exam level).
› Recertification
Valid for 3 years. 120 CE credits over 3 years or higher-level Cisco exam.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 3 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
Firewalls, IDS/IPS, network segmentation, DNS security, SD-WAN, VPN, traffic analysis, wireless security.
Zero trust principles, micro-segmentation, NIST SP 800-207, ZTNA, continuous verification, BeyondCorp.
Reference architectures, control frameworks (NIST SP 800-53, CIS Controls), secure-by-design patterns, threat modeling, trust-boundary design, technology standards.
› Prerequisites
No formal prerequisites. De facto: CCNP Security + several years of hands-on experience.
› Progression
requiredrecommendedWhere this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.
No vendor-gated prereqs.
No certs require this one.
No follow-on certs reference this one yet.
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- CCIE Security v6.x Workbooks (INE/CBT Nuggets/ND Pro)
- INE CCIE Security Bootcamp
- Cisco Authorized Learning Partners
- INE Practice Labs
- ND Pro / Narbik Kocharians Workbooks
- r/CCIE
- Cisco Learning Network
› Version & lifecycle
› Salary signal
Senior network security architect / consultant, US, 7+ years. CCIE-tier vendor lock.
Robert Half Salary Guide + Glassdoor 'Network Security Architect' aggregations · 2024 · US base only · p25–p75 range
› How it compares
Cisco-stack expert (CCIE Sec) vs Palo-stack (PCNSE) — pick by what your team runs.
↔ Compare side-by-sideCCIE Security is the expert tier above CCNP Security — multi-year preparation typical.
↔ Compare side-by-sideSee this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.