ISC2 Blog

HOW TO BECOME AN (ISC)² VOLUNTEER AND MAKE A DIFFERENCE IN THE CYBERSECURITY COMMUNITY

Ever wonder what more you can do to narrow the cybersecurity skills gap or how you can use your cybersecurity skills to make a difference in your local community? (ISC)² has the answer. (ISC)² unveiled a formal Volunteer Program to connect members and non-members with opportunities to make meaningful contributions to the cybersecurity industry on a global and local scale. As a bonus, members and associates can earn continuing professional education (CPE) credits by contributing their time and participating in various professional volunteer activities. Integral to the (ISC)² vision of Inspiring a Safe and Secure Cyber World, the Volunteer Program... Read more →

Why is cybersecurity one of the best fields for young people to enter?

The cybersecurity industry has a talent shortage and is seeking professionals to close the 2.72 million global workforce gap. Young people could be the answer to fulfilling the need organizations have to adequately defend their critical assets. Cybersecurity is a fitting choice for Gen Z and young Millennials interested in a progressive and rewarding field where the only consistency is evolution, advancing challenges and continuing education. Satisfaction and Compensation “Despite some of the prevailing narratives in the media about cybersecurity professionals feeling stressed, unappreciated and facing overwhelming pressure, our research continues to reveal a highly engaged and satisfied workforce.” (2021... Read more →

REGISTER TODAY FOR THE (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

One week to go until the first (ISC)² entry-level cybersecurity pilot exam! Interested individuals can register for the pilot exam online through Pearson VUE. (ISC)² created the forthcoming entry-level cybersecurity certification to establish a clear new pathway for the next generation of professionals to pursue a rewarding career in cybersecurity. The new entry-level cybersecurity certification was also created to establish a recognized, global measure for skills verification, giving hiring managers confidence that prospective employees for entry- and junior-level cybersecurity roles have the required foundational knowledge, skills and abilities, along with an aptitude for on-the-job learning. The certification will play a... Read more →

TIME TO HIT THE BOOKS! TRAINING COURSE IS AVAILABLE FOR CANDIDATES PREPARING FOR THE NEW (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

To help candidates prepare for the forthcoming entry-level cybersecurity certification pilot exam, (ISC)² released a new education program—a live or on-demand expert instruction on the fundamental cybersecurity concepts and five domains covered by the certification. The five domains included in the pilot exam outline are: Security Principles Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts Access Controls Concepts Network Security Security Operations In preparation for taking the entry-level cybersecurity certification pilot exam, candidates can choose one of three live two-hour instructor-led review sessions taking place on January 25, 26 and 27. Each session will accommodate 40 students and... Read more →

No Excuses: Get Your (ISC)² Certification Done in 2022

The need is real. The shortage of cybersecurity talent presents a clear and present danger in virtually every corner of the globe as bad actors plot their next move. How wide is the gap? Recent research shows the cyber workforce must grow by 65 percent to adequately defend organizations’ critical assets.* No excuses — now is your time to commit to certification. Because a safe and secure cyber world can’t wait. (ISC)² is here to help, starting with your Exam Action Plan. Whether you’re pursuing CISSP, SSCP, CCSP, CAP, CSSLP, HCISPP or a CISSP Concentration, you’ll go into it prepared... Read more →

A Cybersecurity Role Has Topped List of Best Jobs

“Information security analyst” tops the U.S. News & World Report 2022 Best Jobs list. The list ranks the 100 best jobs across 17 sectors including business, healthcare and technology, taking into account factors such as growth potential, salary and work-life balance. Having a cybersecurity position at the top of the list is exciting for a young industry that has struggled with perception problems. It highlights the importance of cybersecurity at a time when cyber threats have become one of the top concerns for all types of organizations, both in the private and public sectors, and regardless of size. “Information security... Read more →

Help Shape The CSSLP Exam

(ISC)² regularly conducts Job Task Analysis (JTA) studies to review and update the content outline (or exam blueprint) of its credentialing examinations. A JTA is the methodical process used to determine tasks that are performed by credential holders and knowledge and skills required to perform those tasks successfully. Results of the JTA study link a candidate’s examination score directly to the domain knowledge being tested. A JTA Study Workshop for CSSLP has tentatively been scheduled in early February 2022. In preparation for the upcoming study, we would like to hear from our CSSLP members in good standing. Please comment on... Read more →

The Future of Work without Workers

Many people are talking about the future-of-work, but how can that even be calculated when the primary element – workers – appears to be in short supply? There has been much focus and discussion on the work-from-home and hybrid models of work, concepts that appeal to a surprisingly large contingent of the population, but they pose significant challenges to security specialists, both in the practical terms of maintaining security and Zero Trust with a distributed workforce, but also in terms of their own work choices: is it actually possible to be a CSSP or even a CISO from home? This... Read more →

U.S. Cyber Command Operation Targets ‘Real-life Cyber Threats’

A U.S. Cyber Command (USCYBERCOM) task force has conducted “its first offensive cyber effect operation against real-life cyber threats.” Details of the operation have not been published, but the military says offensive cyberspace operations are “intended to project power by the application of force in or through cyberspace.” News of the operation, conducted by USCYBERCOM’s Cyber National Mission Force (CNMF) from February to August 2021, came in a news release from the Maryland Air National Guard’s 175th Cyber Operations Group, which took part in the mission. “USCYBERCOM’s CNMF plans, directs and synchronizes full-spectrum cyberspace operations to deter, disrupt and, if... Read more →

New Opportunity: Join (ISC)² Regional Event Committees

As we expand our events in 2022, we look forward to offering increased opportunities for education and networking among cybersecurity professionals within their regions. To ensure that each event makes a significant impact with relevant content, (ISC)² is seeking interested volunteers to join event planning committees. Committee members will assist in developing an event that is educational and meaningful for their fellow (ISC)² members and cybersecurity professionals around the world. They will use their expertise to lead the development of localized content, as well as provide insight and guidance into their respective regions. Members will work closely with (ISC)² staff... Read more →

FTC: Fix Log4j Vulnerability, Or Else

A warning to companies from the Federal Trade Commission (FTC) to fix a “serious vulnerability” in the Java logging package Log4j comes as a reminder that cybersecurity teams must remain diligent in keeping up with cyber threats. Otherwise, they could end up costing their organizations millions in remediation and punitive fines. “The FTC intends to use its full legal authority to pursue companies that fail to take reasonable steps to protect consumer data from exposure as a result of Log4j, or similar known vulnerabilities in the future,” the commission said. It’s the first time the FTC has issued such a warning, indicating the commission... Read more →

What's Next for Cybersecurity in 2022?

What does next year have in store for the cybersecurity industry? The “Top Five Cybersecurity Predictions for 2022” webinar presented by Steve Piper, CISSP, Founder & CEO of CyberEdge overdelivers and gives us TEN predictions for the coming year. The webinar, moderated by Brandon Dunlap, Leadership Partner, Security & Risk Management at Gartner, opens by covering the good, bad and ugly of 2021 and then moves to an engaging cybersecurity forecast for 2022. In the presentation, Steve mentions his regret in limiting the title to just five predictions, and expands upon the list by adding five honorable mentions. Top Five... Read more →