(ISC)² Blog

CCSP Spotlight: James Simonetti

Today begins an exciting new series to the (ISC)² blog – our CCSP Spotlight series. Over the next several months, we will share some of our member experiences with you. We hope this will shed some light on the ever-evolving field of cloud security. Name: James Simonetti Title: Cryptographic Engineer Employer: Verisign Degree: B.S. Information Security and Assurance Years in IT: 8 Years in cybersecurity: 1 Cybersecurity certifications: CCSP, CISSP, Security+ How did you decide upon a career in cybersecurity? I knew that I wanted to work in cybersecurity after spending the majority of my career in IT operations roles,... Read more →

From Town Hall to Margaritaville: Security Congress Member Events

The sixth annual (ISC)2 Security Congress is just a few weeks away. The event, colocated with ASIS Seminar and Expo, will take place at the Orange County Convention Center in Orlando, Florida from September 12-14. The annual (ISC)2 Town Hall Meeting will be held from 5:00-7:00 p.m. on Sunday, September 11. The member-only meeting will consist of remarks from (ISC)2 CEO, David Shearer, on what to expect at the Congress event, as well as in the coming year for members. As in previous years, members are able to submit questions for (ISC)2 Management and Board of Directors to address. These... Read more →

Important Security News Flash Regarding SSH Vulnerabilities

The SSH protocol that is embedded on Unix, Linux, Mainframe, and Windows 16 Servers – in additional to Switches, Routers, IOT devices, etc. can be compromised by bad actors with access to keys. This is also true for anyone deploying applications in the cloud. The SSH protocol creates an encrypted tunnel providing users with root level access. In the wrong hands, misuse of the SSH protocol have led to disastrous consequences. Here is why: Encrypted SSH traffic cannot be monitored by existing tools. DLP, SIEM’s, Firewall’s etc. do not work SSH Key’s don’t expire – a key created 20 years... Read more →

Bringing New Entrants into a Hundred-Year Business

At the recent Security Congress APAC 2016 held in Bangkok, attendees consisted of ICT professionals, information security professionals, practitioners, and university students and professors from some regional universities. It was a successful gathering where the attendees shared their ideas and views. We also had a great student track presentation from a young information security practitioner, Vijay Luiz, CISSP (Read Vijay’s blog on how he got into cybersecurity http://blog.isc2.org/isc2_blog/2016/02/associate-security.html), which the students found very informative. While the Congress was a great success, it became an issue that not everyone spoke the “same language”. Something was amiss and upon looking back, one... Read more →

(ISC)² Member Endorsement Process Goes Online

We are excited to share news about the launch of a change to our certification endorsement process. Beginning today, August 17, the process will take place entirely online. Once an (ISC)² exam has been taken and the results validated, a candidate applying for certification must be endorsed by another (ISC)²-certified professional in good standing before the credential can be awarded. This change will enable candidates and the members endorsing them to easily navigate through the endorsement process online, rather than printing, filling out and mailing documents. Feedback from our members and candidates is important to (ISC)². We listened to what... Read more →

Opportunity for Young People

In recent years, many young people have felt disenfranchised and robbed of opportunities to pursue career ambitions. This sits in contrast to the fast-developing field of cybersecurity, where hiring managers regularly report staff shortages and lead times of over six months to fill positions. Cybersecurity is fundamental to the digital economy, but the (ISC)2 Global Information Security Workforce Study forecasts a growing workforce shortage of 1.5 million by 2020. As cybersecurity is a relatively new discipline, most organisations look for a minimum of three to five years’ experience, as well as a good understanding of cybersecurity concepts for the roles... Read more →

Transparency and the Journey to Digital Health

The benefits of digital health are discussed widely around the world. The prospect of increased efficiency and enabling patients to take a more hands-on role in their own medical care are considered positive outcomes by many. However, concerns over data privacy and the prevalence of data breaches in the sector are creating barriers to the adoption of digital health in the United Kingdom (U.K.). With this in mind, we recently hosted a roundtable event in London, inviting several experienced and respected individuals from all aspects of the healthcare sector to discuss some of the most pressing issues on the journey... Read more →