(ISC)² Blog

Maintaining the Relevancy of (ISC)² Certifications: CISSP and SSCP Credential Enhancements

Over our 26-year history, (ISC)² has earned a reputation for providing gold standard information security credentials. Maintaining the relevancy of those credentials amidst the changes in technology and the evolving threat landscape occurring in this industry is a core strategy upon which this organization was built. As a result of a rigorous, methodical process that (ISC)² follows to routinely update its credential exams, I’m pleased to announce that enhancements will be made to both the Certified Information Systems Security Professional (CISSP) and Systems Security Certified Practitioner (SSCP) credentials, beginning April 15, 2015. We conduct this process on a regular basis... Read more →

Comments from (ISC)² Leadership on Obama's Call for 30-Day Breach Notification Policy for Hacked Companies

This proposal is a good start, but as always, the devil is in the details. Implementing this legislation would require both planning and the right people in place to execute. First, we need to consider how the term “breach” is defined – i.e., what would need to happen to require notification? If breached data is encrypted, would that require notification? Note that most states currently have some form of encryption exemption in their data breach laws. Second, the notification should be submitted in such a way so that the information is useful and doesn’t result in a backlog which would... Read more →

CPE Policy Changes for (ISC)² Members Start This Month

Beginning this month, (ISC)² has a new annual continuing professional education (CPE) policy, which requires members to earn an equal number of CPEs each year within a three-year certification renewal period. This policy was updated to help our members remain current on their CPEs on an annual basis, therefore, making the comprehensive three-year certification renewal process easier for them to manage. We have experienced situations where many members found themselves significantly lacking CPEs during the last year of their cycles. The new policy will apply to all new certification cycles starting on or after January 1, 2015. Continuing education is... Read more →

New (ISC)² Executive Director Introduction: Building on Our Successes & Striving for Excellence

I’m pleased to start off 2015 as the new (ISC)² executive director. As someone who has been entrusted with information security responsibilities throughout my career, I welcome the opportunity to speak out about the challenges we face on behalf of those working to keep our cyber world safe. During my past two years as COO at (ISC)², I’ve seen the organization make positive strides toward establishing a member focus; however, this is a sustained commitment with more work to be done. I want to build on the momentum of our successes while continuing to evaluate areas that we need to... Read more →