(ISC)² Blog

Building a Strong Culture of Security – from the Professional Development Institute

(ISC)²’s Professional Development Institute (PDI) launched earlier this year and aims to provide valuable, accessible education and training to cybersecurity professionals. One of the PDI courses currently available is Building a Strong Culture of Security. Like all PDI courses, it is free for (ISC)² members and associates, and available for purchase at $400 for the general public. Technology alone cannot protect an organization. It takes knowledgeable and aware team members to each do their part in ensuring critical assets are protected, and that goes beyond the security team. This self-paced, interactive course is intended for use by security professionals as... Read more →

Your Key to Professional Growth: Invest in Your Group B CPE Activities

by Dr. Chris Veltsos, CISSP, member of (ISC)² Advisory Council of North America It’s easy to feel stressed, or conversely feel stuck in a rut, when it comes to the topic of professional development. We all know “we should/must do it” but aren’t exactly sure on how to go about it. And compared to security domain specific knowledge, skills, and abilities (group A CPE credits for holders of (ISC)² credentials), it’s easy to delay thinking and planning your activities regarding those strange group B CPE credits. Here’s to changing that reality, and in the process your mindset about their place... Read more →

New Cybersecurity Reports Point to Increased Need for Retraining and Vulnerability Management

By now you’re well aware of the widely-reported (ISC)² research that shows there is a global cybersecurity shortage of 2.93 million professionals. Identifying, recruiting and training skilled talent to adequately secure organizational data assets obviously remains a top priority in our industry. Well, over the past few weeks, both Tripwire and IBM have published reports that focus on different layers of the problem and add to the conversation. In its Cybersecurity Skills Gap Survey 2019, Tripwire found that 80% of IT security professionals believe it’s becoming more difficult to find skilled cybersecurity professionals. Not a surprising figure. The interesting wrinkle... Read more →

CISSP Recognized as Top Cybersecurity Certification Program by SC Media

Winner, winner, chicken dinner. That’s what was on the menu for (ISC)² at this week’s SC Awards gala event held in San Francisco, where the CISSP was recognized as the industry’s Best Professional Certification Program for 2019 by SC Media, which is coincidentally celebrating its 30th anniversary in the same year as (ISC)². The SC Awards are recognized throughout the cybersecurity industry as the crowning achievement for IT security, and winners are run through a rigorous judging process that includes testimonials, industry assessments and additional research. The CISSP was hand-picked by a panel of judges for its advancements in cybersecurity... Read more →

CISSP Is Hot, Hot, Hot, Says CNBC

If you already have or are pursuing your CISSP from (ISC)², make sure you have your oven mitts at the ready. That’s because, as reported by CNBC, the new Upwork Skills Index includes the Certified Information Systems Security Professional as one of the 20 hottest job “skills” in the entire U.S. labor market. You read that right. Not just in security. Not just in IT. The entire labor market. Upwork is a platform for freelancers, so they keep a close eye on the types of skills employers are looking for and update their list quarterly to provide real-time validation of... Read more →

Which (ISC)² Certification is Right for YOU?

As cybercrime rises, the world faces a shortage of nearly 3 million cybersecurity professionals. Show employers and prospects you have the advanced knowledge and technical skills to fill this critical and growing demand. With a globally recognized credential from (ISC)², you stand out at the forefront of the field. We know starting the journey to becoming certified can be challenging and even the brightest minds can benefit from having a guide on the journey to success. (ISC)²’s Ultimate Guides are your must-have resource for your certification journey. By downloading a NEW and IMPROVED Ultimate Guide, you will obtain an excellent... Read more →

Planning to Take an (ISC)² Certification Exam? Get Your FREE Certification Prep Kit.

Cheers to you on your decision to pursue an (ISC)² credential in 2019! You’re about to embark on a challenging and highly rewarding journey. Make sure you get the most out of it with the new (ISC)2 Certification Prep Kit. Preparing for the exam is no small task… Your path to success starts with the right study plan, and the Certification Prep Kit will help you map a course that fits your schedule and learning style. Dive right in for everything you’ll need to move ahead with confidence. Inside this free resource, you’ll find… Fast Facts on (ISC)2 Training and... Read more →

Fast Facts about the CISSP

Infographic available now: Get your Fast Facts about the CISSP Read more →

Cert Magazine Salary Survey Says: CCSP is the Next Big Thing

For the fourth year in a row, Certification Magazine named the Certified Cloud Security Professional (CCSP®) as the “Next Big Thing.” The magazine conducted their annual salary survey and found that the CCSP was the top choice for professionals to pursue in 2019. Ranking #2 in the list – for the third year in the row – is the CISSP certification. You can read the full article, “Certification leads to improved performance, increased earning power” here or in the January issue of Certification Magazine. This issue focuses on detailed results and findings from the annual salary survey. Read more →

Cybersecurity Workforce Study: What Cybersecurity Certifications Are You Pursuing This Year?

(ISC)²'s recent Cybersecurity Workforce Study asked what certifications professionals had plans to pursue in the coming year. Download the infographic: What Cybersecurity Certifications Are You Pursuing This Year? Read more →

Cybersecurity Engineer Is the Top Tech Job for 2019

In 2019, cybersecurity engineers will be the best-paid, most recruited tech professionals as organizations struggle to fill vacant cybersecurity positions. The average salary for the position is now $140,000, according to job-finding website Scout Exchange. While this is good news for cybersecurity professionals, it shows how much of a challenge organizations are facing to fill the position. The intensity and damage caused by cyber attacks continues to increase, and as cybercriminals continuously refine their methods, it gets harder and harder to find skilled candidates to build cybersecurity teams to fend off the threat. (ISC)2 estimates there is currently a cybersecurity... Read more →

CISSP-ISSAP Members: Your Feedback is Requested

(ISC)² regularly conducts Job Task Analysis (JTA) studies to review and update the content outline of its credentialing examinations. A JTA is the methodical process used to determine tasks that are performed by credential holders and knowledge and skills required to perform those tasks successfully. Results of the JTA study link a candidate’s examination score directly to the domain knowledge being tested. A JTA Study Workshop for CISSP-ISSAP has tentatively been scheduled toward the end of March 2019. In preparation for the upcoming study, we would like to hear from our CISSP-ISSAP members. Please comment on any new content and... Read more →

CISSP and (ISC)² Membership Recognized by the NCSC

The National Cyber Security Centre (NCSC) has outlined new rules of the road for earning its Certified Cyber Professional (CCP) specialist certification. The new pilot program for the certification commences in 2019 and focuses on assessing two main areas of specialism: risk management and security architecture. Why is this of interest to you? The NCSC has outlined three ways in which candidates can demonstrate foundational cybersecurity knowledge in order to qualify for the scheme. One of those ways is to hold a CISSP certification and a full (ISC)2 membership. This is yet another signpost that highlights the industry recognition of... Read more →

Deep Dive into CISSP Salary Data

(ISC)² is most widely known for the Certified Information Systems Security Professional (CISSP) certification. Holding your CISSP certification means something. It means you are experienced, well-trained, dedicated and constantly working to stay up to speed on the ever-evolving world of cybersecurity. There are more than 125,000 certified CISSPs around the world working at Fortune 100 companies, start-ups and as independent contractors. Certification Magazine surveyed a group of CISSPs and discovered they remain among the highest compensated security professionals, with an average U.S. salary of $131,030. To learn more about CISSP salary information, including job satisfaction and experience levels, read the... Read more →

So You Think You Can Cyber?

The 2018 Cybersecurity Workforce Study, recently released by (ISC)2, reveals that 63% of organizations currently don’t have enough cybersecurity staff. The number is hardly surprising considering the worldwide cybersecurity workforce shortage is nearly 3 million. Employers have an acute need to build their cyber teams with the requisite skills and experience. Their priorities in looking for candidates include: relevant work experience – 49% understanding of advanced cybersecurity concepts – 47% cybersecurity certifications – 43% extensive cybersecurity work experience – 40% strong non-technical/soft skills – 39% If you’re seeking employment in a cybersecurity role, keep these priorities in mind. They provide... Read more →

SSCP Creates Point of Entry to Cyber Career

If you’re looking to break into the field of cybersecurity – and workforce research shows, we need you to join us – (ISC)²’s SSCP certification may be the way to go. Certification Magazine recently wrote about the SSCP certification as a solid point of entry for aspiring security professionals. The certification is ideal for those in “boots on the ground” positions within security operations. The SSCP exam is highly technical and focused on hands-on knowledge skills. The certification is ideal for security analysts, systems engineers, database administrators and others responsible for the day-to-day operations of securing their organizations critical assets.... Read more →

HCISPP Spotlight: Ana Ferreira

Name: Ana Ferreira Title: Doctor Employer: Center for Health Technology and Services Research (CINTESIS), Faculty of Medicine, University of Porto Location: Porto, Portugal Education: BSc in Computer Science, MSc in Information Security, PhD in Computer Science Years in IT: 20 Years in cybersecurity and/or privacy: 16 Cybersecurity certifications: CISSP, HCISPP How did you decide upon a career in healthcare security and/or privacy? After I graduated in 1998, I went to work for a healthcare education institution as a researcher and IT specialist. After a few years, I realized that security and privacy, especially in the domain of healthcare, were crucial... Read more →

Now Available: CISSP-ISSAP and CISSP-ISSEP Training

You asked – we listened! We are excited to announce new Online Self-Paced Training for the CISSP-ISSAP and CISSP-ISSEP concentrations. These courses are available in the recently updated (ISC)² Learning Management System. Both self-paced courses include online access for 134 days, as well as flash cards, a post-course assessment, case studies, quizzes, videos and other learning activities. The ISSAP concentration is ideal for a CISSP who specializes in designing security solutions and providing management with risk-based guidance to meet organizational goals. The Official (ISC)² ISSAP Self-Paced Training covers the six domains of the CISSP-ISSAP CBK®: Identity and Access Management Architecture... Read more →

HCISPP Spotlight: Rema Deo

Name: Rema Deo Title: Managing Director Employer: 24By7Security, Inc. Location: Coral Springs, Florida Education: MBA Years in IT: 25+ Years in Cybersecurity: 5+ Cybersecurity Certifications: HCISPP How did you decide upon a career in healthcare security and/or privacy? I have been in risk management technology and compliance technology career for banking for several years, so when it was time for a change, Cybersecurity and Compliance related work was a logical next choice. 24By7Security has a client portfolio consisting of healthcare organizations as well as several other industries. Healthcare security and privacy work is still more nascent compared to financial technology,... Read more →

A First-Hand Experience with CISSP CAT

Patrick Strijkers is a 43-year-old information risk security officer at a pension funds firm in the Netherlands. He works in the IT security department in security incident management. Patrick’s employer runs a job rotation program, allowing him to gain experience in a variety of roles, with his next position coming invulnerability management this September. He holds the following security certifications: CompTIA Security+ CompTIA Network+ EC-Council Certified Ethical Hacker v8 EC-Council Certified Security Analyst v8 EC-Council Computer Hacking Forensics Investigator v8 Rapid7 Nexpose Rapid7 Metasploit Pro Patrick’s goal last year was to earn his CISSP certification. He attended a five-day boot... Read more →