(ISC)² Blog

Attacks Happen. Be Ready.

A data breach hits headquarters at 3 a.m. Are your critical assets secure? Hire (ISC)²-certified cybersecurity professionals to prepare for, prevent and recover from attacks. Read more →

CISSP Spotlight: Paul Bryant

Name: Paul Bryant Title: CIO Employer: phew! Cyber Security Location: Auckland, New Zealand Education: MCom (Hons), LLB (Hons) Years in IT: 20 Years in cybersecurity: 15 Cybersecurity certifications: CISSP How did you decide upon a career in cybersecurity? In my roles designing and managing financial services technology infrastructures and leading technology teams I had a good deal of both technical and non-technical exposure to information security considerations and solutions. It is a complex and ever-changing area that bridges business and technology, and requires both technical and commercial engagement. It is also an area that is under-served in industry. Why did... Read more →

ENABLE: (ISC)² Members Can Access Cloud Security Training from A Cloud Guru

(ISC)²’s theme for 2018 is Enrich. Enable. Excel. In an effort to enable our members to be the best in their field, we have partnered with A Cloud Guru to offer a one-month free membership to A Cloud Guru. This benefit allows members exclusive access to cloud security education from A Cloud Guru, which delivers an array of cloud security courses to enable cybersecurity professionals to better defend their data in the cloud. Cloud security was identified as the number one skill security professionals needed to acquire or strengthen to advance their career, according our 2017 Global Information Security Workforce... Read more →

(ISC)² Item Writing Explained

To ensure the CISSP exam remains up-to-date and relevant to the industry, we are constantly working on the exam items (aka “questions”), and that process is 100% member-driven! (ISC)² spoke with Lisa Vaughan, CISSP, about her experience in a recent Item Writing Workshop. Lisa is the Chief Information Officer for the Mississippi Department of Environmental Quality and it was her first-time volunteering as an item writer. She was a participant in a CISSP Item Writing Workshop that took place in Tampa, Florida. The workshop spans three days, taking these dedicated member volunteers away from their jobs and family for a... Read more →

HCISPP Spotlight: Debi Carr

Name: Debi Carr Title: CEO and Consultant Employer: D. K. Carr and Associates, LLC Location: Christmas, FL, U.S.A. Years in IT: 28 years Years in cybersecurity and/or privacy: 20 years Cybersecurity certifications: HCISPP, CAHIMS How did you decide upon a career in healthcare security and/or privacy? As a practice manager of a healthcare practice, I was appointed the “Privacy and Security” Officer when HIPAA went into effect. I was also responsible for overseeing the technology in the practice through the years. As a result, I began educating myself on security and privacy protocols. Why did you decide to pursue your... Read more →

What Does CISSP CAT Mean for You?

By now, you’ve heard that the CISSP exam format has changed from linear to Computer Adaptive Testing (CAT). This change to the English language exam started in December of 2017. If have questions about what this change means for you, as you’re preparing for your CISSP, we’ve got answers in our latest video: Looking for even more information? Check out our CISSP CAT FAQs. Read more →

People and technology: a two-pronged approach to closing the skills gap

By Wesley Simpson, COO, (ISC)² Some have called the skills gap in IT and cybersecurity a national security crisis. Yet, it’s one that most everyone in the industry doesn’t know how to solve. Many look to automation and other technologies as a solution to the problem. Others foster relationships that will fill the pipeline and attract new talent. But there is no ONE solution. Instead, organizations need to both build and buy the talent they need. The growing gap between skills needed and qualified candidates is not a problem that technology alone can solve, but it is one that is... Read more →

Associate of (ISC)² Spotlight: Rachel Phillips

Name: Rachel Phillips, PMP, Assoc. (ISC)² (ISC)² Exam(s) Passed: CISSP Title: Cybersecurity Analyst Location: Seattle, WA, U.S.A. Education: M.S. Information Technology (Security and Assurance) and B.S. Business Administration (New Media and Internet), Kaplan University Years in IT: 10 Years in Cybersecurity: 3 Cybersecurity Certifications: Associate of (ISC)² Rachel Phillips, PMP, Assoc. (ISC)² is an influencer and sought-after contributor for her views and leadership in technology and security. She holds a Master’s in IT with emphasis in Information Security and Assurance, and a Bachelor’s in Business Administration from Kaplan University. As a cybersecurity analyst, she provides oversight and assurance of meeting... Read more →

Ways to Earn CISSP CPEs

In this ever-changing field, you’re constantly required to learn about new tools, vulnerabilities and threats. We know that time and financial resources may get in the way of participating in CPE offerings that help you sharpen your skills and hone your craft. We are committed to enabling our members to become the most well-rounded and effective cybersecurity practitioners around so we’ve compiled a list of CISSP CPE opportunities that will work for your busy schedule. Online CPE Opportunities: Read InfoSecurity Professional Magazine (and take the quiz) Watch a CPE webinar (including any of our cybersecurity webinar series: ThinkTank, e-Symposium, From... Read more →

SSCP Spotlight: Wai Sheng Cheng

Name: Wai Sheng Cheng Title: Security Analyst Employer: Cboe Global Markets Location: Kansas, U.S.A. Degree: Master of Science, Information Systems Engineering, Johns Hopkins University Years in IT: 6 Years in information security: 3 Cybersecurity certifications: SSCP How did you decide upon a career in cybersecurity? I decided on a career in cybersecurity when my email account was first compromised in 2011. I learned about this when my friends and family called to ask if I had sent out emails asking for money. As an engineer-in-training, I was curious to know why and how this had happened. It was through this... Read more →

SSCP Spotlight: Timothy Meryweather

Name: Timothy Meryweather Title: IT Auditor Location: Greater Los Angeles Area Degree: Bachelor of Science Years in information security: 6 Cybersecurity certifications: SSCP (ISACA: CISA, CRISC) How did you decide upon a career in cybersecurity? Our Audit Department’s Senior IT Auditor needed help and I was transferred from Background Licensing. Right place, right time. I possess a guardian spirit and have mostly worked in similar areas of employment: U.S. Marine, Deputy Sheriff, Police Officer, Private Security/Life Safety, casino surveillance, background licensing investigator. With my investigative training background, it was a natural migration into auditing the cybersecurity of information technology. Why... Read more →

SSCP Spotlight: Simon Morgan

Name: Simon Morgan Title: IT Systems Engineer Employer: LSA Systems Ltd. Location: Billericay, U.K. Degree: HND in Computing Years in IT: 15 Years in information security: 3 Cybersecurity certifications: SSCP How did you decide upon a career in cybersecurity? Information security has always interested me. The ever-present risks that business and individuals face from cyber-attacks and threat actors drives me to try and help protect them to the best of my ability. It is an exciting field to be in that has new and interesting challenges on a daily basis. Not only this, but going forward in my career I... Read more →

CCSP Spotlight: David Schneider

Name: David Schneider Title: Senior Cyber Security Threat Engineer Employer: Garmin International Location: Olathe, KS, U.S.A. Degree: BA, BS, MS Years in IT: 20 Years in cybersecurity: 12 Cybersecurity certifications: CCSP, CISSP, CISM, CISA, GWAPT, CIS LI How did you decide upon a career in cybersecurity? I became interested in cybersecurity while doing software development. When working as a developer, I started becoming interested in secure coding methods and what I could do to make what I was working on more secure from both a technical and end-user perspectives. I started enjoying other aspects around information security and felt that... Read more →

What is the CISSP CAT exam like?

“My exam ended after exactly 100 questions and took me a little more than an hour to complete.” – Keith Yanachik The CISSP exam changed to CAT format in December 2017. We spoke to one of the first to take the CISSP CAT exam, Keith Yanachik, to ask him about his experience. Keith is an Enterprise Architect and has a bachelor’s degree in information systems management, as well as an MBA. Why did you decide to pursue the CISSP certification? I pursued the CISSP certification as a means to recognize my cybersecurity skills and to confirm that I know what... Read more →

SSCP Spotlight: Sohail Awad

Name: Sohail Awad Title: Engineer Employer: Freelancer Location: U.K. Degree: Master of Science in Computer Security Years in IT: 16 Years in information security: 12 Cybersecurity certifications: SSCP, CCNA Security, CCNA R/S What security skills and knowledge would you count as relevant to your current role, and ambitions for the future? Every skill or bit of knowledge I gain is relevant to my role as they help me to see the big picture and better tailor the solutions I create and develop. The SSCP, in essence, is designed to deliver that vision. I have found the secure programming techniques, data... Read more →

4 Things You Need to Know about the (ISC)² CISSP CAT Exam

Starting December 18, 2017 all English CISSP exams will be administered in a Computer Adaptive Testing (CAT) format. But what does this actually mean for those preparing for the exam? Let’s look at 4 things to expect when you sit for the CISSP CAT exam: The passing score is the same. You still need to score 700 out of 1000 to pass the CISSP exam. The content is exactly the same as the “old” (linear-based) exam format. The questions come from the same bank, and the pass rate will be unchanged by this format update. You can still take breaks.... Read more →

SSCP Spotlight: Todd Painter

Name: Todd A. Painter Title: Network Engineer Employer: UNG, Inc. Location: Boiling Springs, SC (USA) Years in IT: 7 Years in information security: 3 Cybersecurity certifications: SSCP, Security+, working on CISSP How did you decide upon a career in cybersecurity? Looking at the current scope of IT, it was apparent to me that the IT security field would have the largest growth in the coming years. With that in mind, I knew that I had a good chance at becoming a valuable asset to any company that needed a security expert, or someone with more of a security mindset rather... Read more →

CISSP Now Registered with Credential Engine

Understanding which certification is right for you can be a daunting task. (ISC)² itself has a portfolio of credentials related to cybersecurity, with specializations in certain areas. Credential Engine hopes to help people navigate the sometimes-cloudy world of certifications. Launched on December 7, 2017, Credential Engine is a nonprofit organization dedicated to promoting transparency and literacy in the credential marketplace, to make it easier for people to figure out what certification is best for them no matter where they find themselves in their career. The organization came out of the Credential Transparency Initiative (CTI) which started back in 2013. While... Read more →

CISSP Spotlight: James Packer

Name: James Packer Title: Security and Cloud Specialist Employer: Big 4 Firm Location: London, UK Education: Information Technology and Security Years in IT: 10 Years in Cybersecurity: 5 Cybersecurity Certifications: CISSP, CCSP, CIS F ISO27001 How did you get in to a career in cybersecurity? I’d say I’m like countless security professionals out there, I first started in IT and security was just a part of my job, inherent in every role I performed. I started in desktop support, progressing through the service desk lines to a managerial role, before moving in to projects and architecture- “solutionising” as I call... Read more →

Breached Data: Keeping It Secret Doesn't Make It Go Away

When Uber’s massive data breach made it to the public’s ears recently, it became a member of an infamous group of companies who not only had vital customer data stolen, but who sat on the story and did not inform the public or the media until much later. The reasons for data breaches vary, but are heavily tinted by human errors and the presence of unprotected files or weaknesses on cloud servers. This is something that should make all cloud service providers (CSPs) sit up and take notice. Bad PR for one is bad PR for all. The fact is,... Read more →