ISC2 Blog

How is multicloud changing cloud security?

Organizations accelerating their operations in the cloud are adopting a multicloud approach. Their goal: an infrastructure that’s agile, dispersed and supportive of data access anywhere by hybrid workforces and customers. The numbers demonstrate the trend: 72% of organizations are adopting a hybrid or multicloud strategy. 72% use multiple IaaS providers. 39% have more than half of their workloads in the cloud. In tandem with the rise of multicloud, cybersecurity concerns have evolved and intensified. As more data is stored across multiple cloud service providers, cyberthreats targeting cloud resources are more frequent. Organizations worldwide are grappling with cloud-based risks and how... Read more →

Preparing for the (ISC)² CCSP exam

By Dwayne Natwick, CISSP, CCSP, CGRC, CC, (ISC)² Authorized Trainer, author, and product manager with 30+ years of experience in the IT industry You want to take the CCSP exam with the hopes of getting (ISC)² Certified Cloud Security Professional. So, what are the best ways to prepare for this exam? People prepare and learn differently. You may prefer a study guidebook, you may test your skills through on-demand courses and quizzes, or maybe you prefer preparation through a full instructor-led training course. Whatever your preference, this article will provide you with some of the tools and materials that you... Read more →

Real Talk with CCSPs

An interview with Neha Dhyani, CCSP The information security profession is one of the most evolving careers across the IT industry. In many cases, people have a hard time staying up to date on all of the developing trends and changing technologies. Imagine what it would be like to take an extended sabbatical, and then try to return without any gaps in your knowledge. We interviewed Neha Dhyani, who took a break in her professional journey and returned to the Infosec profession with renewed energy levels not only to continuously improve her skills but to impart that knowledge to others... Read more →

Calling All CISSP-ISSEPs! Help Shape Future CISSP-ISSEP Exams!

Earlier this year, we asked for feedback for a less experienced Security Engineering role that (ISC)² is exploring for addition to our certification portfolio. Now the CISSP-ISSEP concentration exam will be starting a new certification lifecycle with a separate JTA Study Workshop (tentatively scheduled for August 14-16, 2023.) To assist in this process, we are asking that anyone who holds the CISSP-ISSEP or any CISSP concentration to please review the current CISSP-ISSEP Exam Outline and consider the following questions: Do you believe that the current CISSP-ISSEP exam outline adequately covers the existing and emerging cybersecurity techniques and threats CISSP-ISSEP practitioners... Read more →

Preparing for the (ISC)² CISSP exam

By Dwayne Natwick, CISSP, CCSP, CGRC, CC, (ISC)² Authorized Trainer, author, and product manager with 30+ years of experience in the IT industry You want to take the CISSP exam with the hopes of getting (ISC)² Certified Information Systems Security Professional (CISSP). So, what are the best ways to prepare for this exam? People prepare and learn differently. You may prefer a study guidebook, you may test your skills through on-demand courses and quizzes, or maybe you prefer preparation through a full instructor-led training course. Whatever your preference, this article will provide you with some of the tools and materials... Read more →

New and improved online training for CCSP from (ISC)²

You’re ready to take the lead in your career by earning the Certified Cloud Security Professional (CCSP®) certification. Getting CCSP-certified opens expanded opportunities worldwide in cloud security and career advancement. The demand for cloud security professionals is so hot, CCSP ranks No. 2 on Certification Magazine’s “The Next Big Thing” list of certifications professionals plan to earn this year. CCSP has earned its reputation as the gold standard certification in cloud security due in large part to its rigor. Becoming CCSP-certified takes preparation and planning. That’s where Official (ISC)² Online Self-Paced CCSP Training comes in. It’s a new and innovative... Read more →

Infosecurity Europe: Are Certifications a Barrier to Widening the Cybersecurity Talent Pool?

Is the importance of certifications at risk of turning them into check box hiring aids for organizations in a hurry? A CISO panel at this week’s Infosecurity Europe conference weighed up the arguments. By John E. Dunn Certifications are a signal of personal achievement, professional development, and hiring credibility. But at a time of skills shortages are they at risk of being misunderstood and misapplied in ways that might sometimes turn them into a barrier to better cybersecurity? It’s a complex topic that was given an airing at this week’s Infosecurity Europe conference session What’s the Point of Cyber Security Certifications?... Read more →

CISSP-ISSAPS – Additional Opportunity to Provide Input

Earlier this year we asked for feedback regarding the CISSP-ISSAP exam outline update. If you didn’t provide feedback in January, you still have an opportunity to do so! (ISC)² is holding a Job Task Analysis (JTA) Study Workshop (tentatively scheduled for July 24-26). We are asking those who hold this (or any) CISSP concentration to review the current CISSP-ISSAP Exam Outline and let us know the following: Do you believe that the current CISSP-ISSAP exam outline adequately covers the existing and emerging cybersecurity techniques and threats CISSP-ISSAP practitioners are facing in their jobs today? If not, what sort of topics/content... Read more →

Preparing for the (ISC)² CC Exam

By Dwayne Natwick, CISSP, CCSP, CGRC, CC, (ISC)² Authorized Trainer, author, and product manager with 30+ years of experience in the IT industry You want to take the Certified in Cybersecurity (CC) exam with the hopes of earning your first (ISC)² certification. So, what are the best ways to prepare for this exam? People prepare and learn differently. You may prefer a study guidebook, you may test your skills through on-demand courses and quizzes, or maybe you prefer preparation through a full instructor-led training course. Whatever your preference, this article will provide you with some of the tools and materials... Read more →

Here’s how to take your career higher into the cloud

The urgency for cloud security professionals worldwide is unrelenting. Even as cloud technology advances, bad actors are becoming more sophisticated. There’s always a need for new solutions to mitigate cyberattacks. Adding to the challenges for organizations short on cloud security talent, international regulators are constantly raising the bar for operating securely in the cloud. Keeping up with this perpetual change requires continuous learning. Cybersecurity professionals must take the time to stay up-to-date in order to succeed, and that includes cloud security. For those just entering the field or seriously considering it, investing in learning is a strategic way to start... Read more →

Dark Reading Unveils Inaugural CISO Advisory Board

Industry panel underlines the value of certification as majority are CISSPs. By Joe Fay Cybersecurity publication and community Dark Reading has announced the members of its first CISO Advisory Board, who will help advise its staff and journalists, ensuring the views of real-world cybersecurity professionals are recognized. Kelly Jackson Higgins, Editor-in-Chief of Dark Reading, said in a statement that the Advisory Board would deliver direct insights on the security issues facing all types of organizations. “Our editors will then apply this crucial, first-hand knowledge to continue to deliver meaningful content for our readers.” The Advisory Board also highlights the important... Read more →

Preparing for the (ISC)² CGRC exam

By Dwayne Natwick, CISSP, CCSP, CGRC, CC, (ISC)² Authorized Trainer, author, and product manager with 30+ years of experience in the IT industry You want to take the CGRC exam with the hopes of getting (ISC)² Certified in Governance, Risk, and Compliance. So, what are the best ways to prepare for this exam? People prepare and learn differently. You may prefer a study guidebook, you may test your skills through on-demand courses and quizzes, or maybe you prefer preparation through a full instructor-led training course. Whatever your preference, this article will provide you with some of the tools and materials... Read more →

Real Talk with CCSPs: An Interview with Shubhra Deo

Often in cybersecurity, we encounter professionals who never intended or expected to pursue security at all. In fact, when we spoke with Shubhra Deo, she revealed that her introduction to cybersecurity started as a mere curiosity. It eventually led to her gaining the experience, and sitting for two exams that earned her the CISSP, and the CCSP credentials. Her story shows how important curiosity can be in accelerating one’s career. Q: Could you tell us a little about your current job, and what attracted you to cybersecurity? A: I am currently working as a Head, Data Security & Privacy. Back... Read more →

New CISSP Exam Registration Process for 2023

Looking to earn your (ISC)² CISSP certification? Make sure you follow these updated steps to register for your exam. Here is how you can register for the CISSP exam: Log in to your account at www.isc2.org and visit the Register for Your Certification Exam If you don’t have an (ISC)² account, you’ll need to create one before you register for your CISSP exam. We recommend signing up as an (ISC)² Candidate so you can take advantage of discounted CISSP training and other benefits. You’ll then visit https://my.isc2.org/s/ISC2-Pearson to fill out your Exam Account Information form. Once completed, review for accuracy... Read more →

Real Talk with CCSPs: An Interview with Panagiotis Soulos

“Cloud is the present, and the future. It affects everything, every day, both in business and our personal lives.” With these words Panagiotis Soulos summarizes his philosophy of why the CCSP credential is important to any cybersecurity professional. Panagiotis holds the position of the Global Information Security Manager in Global Information Security at Intrum. We recently had the opportunity to learn more about his career. Q: What is your current position at Intrum? A: I recently changed positions, moving from Information Security Officer, into leading a new unit that will be help Intrum to manage and control all aspects of... Read more →

What’s Driving the Demand for GRC Professionals in Critical Infrastructure?

As geopolitical tensions continue, cyberwarfare has taken its toll on the world. Last July, the FBI, CISA and the Department of the Treasury issued a joint advisory about North Korean hackers targeting U.S. healthcare systems. Another warning was issued about Russian state-sponsored CNI attacks aimed against Ukraine or organizations providing materiel support. Alarmingly, the last few years have seen cyberattacks on oil and gas (Colonial Pipeline), nuclear operations (Iranian nuclear facility, Kansas nuclear plant, Stuxnet) and water utilities (Oldsmar, Israeli facilities) among others. In response, more CNI-geared legislation is on the way. The most game-changing move on this front last... Read more →

Provide Your Feedback on the CISSP-ISSEP Exam Outline

At (ISC)², we pride ourselves in our steadfast dedication to maintaining the relevance and quality of all the certifications in our portfolio. (ISC)² certifications are constantly being reviewed and updated to make sure they are serving the needs of professionals who hold them, as well as those that are seeking them. (ISC)² is exploring a new security engineering credential that is in better alignment with global standards for recognized roles and specialisms. The current CISSP-ISSEP concentration certification is earned after obtaining your CISSP. This new certification could be obtained by a practitioner before seeking the CISSP credential. We are in... Read more →

CAP Is Now Certified in Governance, Risk and Compliance (CGRC)

Effective today, the (ISC)² Certified Authorization Professional (CAP) certification is known as the Certified in Governance, Risk and Compliance (CGRC)TM. This name better represents the knowledge, skills and abilities required to earn and maintain this certification. Those who earn and hold the CGRC have the knowledge and skills to integrate governance, performance management, risk management and regulatory compliance within the organization while helping the organization achieve objectives, address uncertainty and act with integrity. CGRC professionals can align IT goals with organizational objectives as they manage cyber risks and achieve regulatory needs. They utilize frameworks to integrate security and privacy with... Read more →

(ISC)² Certified in Cybersecurity Exam Now Available in More Languages

The (ISC)² Certified in Cybersecurity exam, designed for entry- and junior-level practitioners or career changers looking to start a new cybersecurity career, is now available in six languages, including Chinese, Japanese, Korean, German, Spanish and English. Making this exam available in additional languages is a key part of the association’s global pledge of One Million Certified in Cybersecurity, which offers free Certified in Cybersecurity exams and self-paced education courses for one million people through the (ISC)² Candidate program. The 2022 (ISC)² Cybersecurity Workforce Study revealed that more than 464,000 cybersecurity workers joined the profession in 2022. Despite that growth, the... Read more →

How to Earn Your (ISC)² Certification

We are excited to have more than 130,000 individuals become (ISC)² Candidates since launching in September 2022. Many of them will go on to earn their Certified in Cybersecurity (CC) as part of our One Million Certified in Cybersecurity pledge. For those new to (ISC)², or those who’ve had their sights set on their CISSP for years now, you may not be sure exactly how you become (ISC)²-certified. Your certification is more than a single exam. There are three steps to earn your (ISC)² certification: Step 1: Pass your exam Step 2: Submit your certification application Step 3: Pay your... Read more →