Bob Aiello - June 2003 In my spare time, I have been preparing for the CISSP exam which is a certification for IT Security experts. It is becoming a very hot item to add to your resume. Some of the material is very interesting and informative. The Software Development material is, frankly, pretty light, and I am still searching for a section on Software Configuration and Release Management. There is some information on Change Control, but somehow the CISSP does not address the relevance of CM to security.