All the "talk" of cyber-terrorism and all that is all blown out of proportion. And for gosh-sakes look at all of the buffer overflows found every week in different applications, really, there are probably only 10 people worldwide who can exploit those holes; these are security issues are found almost entirely in research centers of university's and corporations. I remember reading last year that the NSA reported that in their estimates there are 1,000 people worldwide who can spot a security flaw in an operating system and 5,000 people who can exploit that flaw if it is pointed out to them.
This kind of takes the "shivers" out of all this scary cyber-terrorism "stuff."
Should you have a secure system, of course, but bring some sense of reality into the mix.
And another thing about CISSP certification, I read a study by IDG or Gartner or another large national IT survey company who says that less than 20% of all IT security professionals have any certification. Kind of makes you wonder who is really pressing for people to get it? Vendors who make money is a good guess.