(ISC)² Blog

Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

In the second portion of this blog series, we are sharing member stories from those with four to six years of experience in cybersecurity. We asked members about their entry into cyber from their first positions to today and what advice they have for newcomers. Do you have advice for incoming cyber professionals? Weigh in on the (ISC)² Community conversation “How to start a career in cybersecurity?” Brian Bresnahan, CISSP, Senior Security Analyst | United States Prior to migrating to a security role, I programmed voice and video systems for 15+ years. I also had extensive data center experience with... Read more →

(ISC)2 Supports Members with Thoughtful Response to SEC Proposed Rule on Cybersecurity Reporting

On March 9, 2022, the SEC released new proposed rules relating to cybersecurity risk management, incident reporting, and disclosure for investment advisers and funds. The proposed rules would require advisers and funds to adopt and implement policies and procedures that are designed to address cybersecurity risks. Advisers and funds would be required to review and assess the design and effectiveness of their cybersecurity policies and procedures; and prepare a report describing the review, explaining the results, documenting any incident that has occurred since the last report, and discussing any material changes to the policies and procedures since the last report.... Read more →

Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 1

We recently asked our members who volunteer to engage with the (ISC)² blog about their entry into cyber and what advice they have for those interested in joining the field. These stories help us see a few unique career trajectories and how they are navigating entry and gaining experience in the cybersecurity industry. In part one of this blog, we are sharing members with three years or less of experience in cybersecurity. Do you have advice for incoming cyber professionals? Weigh in on the (ISC)² Community conversation “How to start a career in cybersecurity?” Rishipal Yadav, Senior Cybersecurity Specialist |... Read more →

(ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

We are excited to announce that more than 1,000 cybersecurity career hopefuls have taken their first step toward launching their careers by taking the (ISC)² entry-level cybersecurity certification pilot exam. Once they earn the certification, they will demonstrate to employers they have the foundational knowledge, skills and abilities to succeed in entry- and junior-level roles. Since the program’s inception earlier this year, more than 1,000 people around the world have taken the exam and many have registered for the (ISC)² entry-level cybersecurity certification course with their exam still to come. With the global cybersecurity workforce needing to grow by 65%... Read more →

How to Prevent Burnout Among Cybersecurity Professionals Before, During and After a Breach

By Diana-Lynn Contesti (Chief Architect, CISSP-ISSAP, ISSMP, CSSLP, SSCP), John Martin (Senior Security Architect, CISSP-ISSAP, CISM, Open Group Certified Architect Master) and Richard Nealon (Senior Security Consultant, CISSP-ISSMP, SSCP, SABSA SCF) Cybersecurity professionals are often faced with making difficult decisions under intense pressure with the potential of long-term effects on the business. Over time, this stress can weigh on cybersecurity pros and potentially cause “burnout” among employees as well as long-term psychological effects. What can be done to prevent burnout among employees and how can we support our fellow colleagues? These questions are becoming more prevalent in the industry as... Read more →

(ISC)² Advocates for Membership – Shares Opinions on Proposed UK Standards and Pathway

In 2018, the UK’s Department for Digital, Culture, Media and Sport (DCMS) funded the creation of the UK Cyber Security Council, which launched in March 2021. The UK government will look to the council as the authority on the cyber profession as it works to implement and enforce consistent standards for the industry. In January 2022, DCMS issued a public consultation on proposals to develop the cybersecurity profession in the UK. The proposal looks to provide clarity to the industry by looking at similar established fields such as accounting, law, and engineering that already have professional standards and pathways in... Read more →

Report: Cybersecurity Skills Gap Creates Vulnerabilities

Finding qualified cybersecurity personnel is never easy. Recruitment has become an even bigger challenge in the last two years as workforce shortages intensified and corporate networks expanded into employees’ homes. Worldwide, 60% of organizations say they are struggling to recruit cybersecurity talent, while 52% struggle to retain qualified people, according to a new report by Fortinet. The report is based on a survey of 1,223 IT and cybersecurity decision-makers across the globe. The struggle has a cost: 67% of respondents say the cybersecurity talent shortage creates additional risks for their organizations. Already, 80% of organizations have suffered at least one... Read more →

You Can Join the (ISC)² Board of Directors

Have you ever considered joining the (ISC)² Board of Directors? Our all-member and all-volunteer Board of Directors give their time and expertise to help guide our association forward and lead us in our vision of Inspiring a Safe and Secure Cyber World.  New this year, (ISC)² is hosting an open call for self-nominations for its available (ISC)² Board of Directors positions. All (ISC)² members in good standing and interested in serving are encouraged to submit their applications before June 12.  This new process enables more (ISC)² members to step forward and volunteer for the Board by submitting their nomination. This... Read more →

HOT CYBERSECURITY TECHNOLOGIES

By Ruchika Sachdeva, CISSP, Certified Lead Auditor ISO 27001, Partner Trainer ISO 27001 with PECB. With the advent of the pandemic, the plethora of enterprises has turned inside out. The accelerated digital business has led to an exponential increase in cognition of both the service providers as well as the user community. Nevertheless, the hacktivists (a combination of hacker and activist) have found a persistent playground to play their part and constantly outsmart modern cyber security technologies. As per the Cost Of Data Breach Report (CODB), there has been 10% increase in the average total cost of a breach, 2020-2021.... Read more →

Board, (Dash)board and Bored

By Jon France, CISSP, CISO at (ISC)². Following our last quarterly meeting with our Board of Directors, Jon began to think about what a CISO should present, how to present it and, of course, what you hope the key takeaways are. Board priorities are clear – protect the organisation, discharge duty of care, grow the business and set or correct strategic direction, but what and how does the CISO tell the board what the cyber landscape is? The purpose of a Board – like the (ISC)² Board of Directors – is to consider strategic directions, bring expertise, balance risk and... Read more →

CCSP Exam – Many Changes on the Way!

On August 1, several changes will be made to the CCSP exam. We are excited to share that the CCSP exam will be available in four more languages. Currently, the CCSP exam is available in English and Japanese. We will also be offering the CCSP exam in Chinese, Korean, German and Spanish beginning in August. In addition to these new languages, we will be updating the length of the CCSP exam. As announced earlier this year for the CISSP exam, 25 pre-test (unscored) items will be added to the exams in all languages. These items do not impact the pass/fail... Read more →