Is the CISSP for information security professionals considered valuable?