Perhaps I am risking scorn here by asking about certifications but I am relatively thick skinned (or perhaps completely obtuse) so scorn away if you feel the need. I have someone on my case wanting me to sit the exams for the CISSP certification. I know next to nothing about this certification. My impression is that it is of a more "managerial" nature than a technical nature. Comments?