(ISC)² Blog

READY for (ISC)² Events of the Future

(ISC)² CEO Clar Rosso recently joined Megan Gavin, director of global events, for a webinar as part of the series Inside (ISC)². The two executives candidly discussed the 2021 (ISC)² Security Congress, taking place October 18-20, as well as the future of all (ISC)² global events. Megan shared that while Security Congress is changing from hybrid to virtual, the agenda, content, number of sessions and speakers will not be impacted, and the shift provides an opportunity for us to provide another world-class virtual conference. “As much as we’re disappointed that we will not see you in person, we are dedicated... Read more →

2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

To provide transparency with the association, (ISC)² provides a quarterly update for members and candidates where we report on the latest developments at (ISC)². Following our board meetings, our CEO, Clar Rosso, and (ISC)² Board of Directors Chairperson, Zachary Tudor, CISSP, recap the latest association developments. The 2021 Q3 update included membership milestones (including 10,000 CCSP members worldwide!), association accreditations and new executive leadership announcements focused on member benefits and advocacy. Zach and Clar also discuss what (ISC)² is doing to continue to address global diversity, equity and inclusion in cybersecurity, as well as the workforce gap. You can view... Read more →

READY To Celebrate Global Achievement Award Winners?

The (ISC)² Global Achievement Awards (GAA) recognize individuals who have significantly impacted the cybersecurity community. Recognizing these winners and learning about their contributions helps to inspire a safer and more secure cyber world. In addition to being recognized here on the (ISC)² blog, in a press release, and in our InfoSecurity Professional magazine, winners will also be celebrated at (ISC)² Security Congress 2021 and receive exclusive benefits while attending the conference. The early-bird registration discount is available for all attendees until August 13; register today to save $200! We are proud to announce the winners of the 2021 Global Achievement... Read more →

READY for What’s New at (ISC)² Security Congress in 2021?

READY for What’s New at (ISC)² Security Congress in 2021? Cybersecurity professionals are facing some of the toughest challenges of their careers. The shift to remote work has been sudden and wide-ranging. Only about half (53%) of respondents to the 2020 (ISC)2 Cybersecurity Workforce Study say they were “very prepared” for remote work. It’s time to assess and reset. We are looking forward to our first-ever hybrid (ISC)² Security Congress on October 18-20. This year’s event will have something for everyone, whether you decide to attend virtually or in person at the Hyatt Regency Orlando. Based on your feedback, we... Read more →

Are you READY for (ISC)² Security Congress?

Last year was a first for (ISC)² Security Congress, as our conference took place entirely virtually. The COVID-19 pandemic forced nearly all events in 2020 to go virtual and we’re excited to take the experience from that event and use it to deliver an even better one for you this year. Whether you’re a first-timer or a returning attendee, you’re going to love the first-ever hybrid Security Congress. This year, the All Access Pass offers the in-person experience that so many of us have missed over the past year and a half, plus the option to attend sessions virtually. We... Read more →

It’s Official: (ISC)² Security Congress is Back for the 11th Year in a Row!

Registration for the 11th annual (ISC)² Security Congress is now open! The renowned global three-day conference, focused on continuing education for cybersecurity professionals and information security specialists, will be hosted as a hybrid event for the first time in 2021. Engaging in-person sessions, discussions, and networking events will be held at the Hyatt Regency in Orlando, FL from October 18-20, and will also be accessible online. (ISC)² members are eligible for a special discount of $300 off all pass types. Including an optional two days of pre-conference certification-focused education on October 16-17, (ISC)² members can earn as many as 40... Read more →

Deadline is Extended for 2021(ISC)² Global Achievement Awards Nominations!

Haven’t had a chance to nominate a colleague, peer or mentor yet for the Global Achievement Awards? Great news, the deadline has been extended to April 23! There are a few updates to the awards this year. With so many awards to choose from, let’s take a look at a few of them. These awards are similar in that they recognize individuals who have made a significant impact on the security industry during the past year. (ISC)² Government Professional Award This award recognizes regional government information security leaders who have made significant security developments at the federal, state or local... Read more →

So Many Awards, So Little Time Left to Nominate. Complete Your Global Achievement Award Nomination Today!

So Many Awards, So Little Time Left to Nominate. Complete Your Global Achievement Award Nomination Today! Do you have a colleague or perhaps a mentor who has accomplished something exceptional and worthy of recognition? Nominate them for the Global Achievement Awards before the deadline of April 9! Winners of these awards receive recognition throughout the (ISC)² Security Congress event and recognition during the exclusive VIP awards reception and the attendee networking night, as well as in the InfoSecurity Professional magazine. Each award winner and their nominator will receive a complimentary pass to attend Security Congress. A few reminders as you... Read more →

Women Leaders Offer Tips For Building a Cybersecurity Career

On March 8, 2021, in celebration of International Women’s Day, five accomplished female security professionals met for a wide-ranging and spirited panel discussion on how to encourage more women to join the cybersecurity field, and provided highlights from their own journeys in the profession. The panel was moderated by Sharon Smith, CISSP, cybersecurity strategy and advisory consultant, and included the following security industry leaders: Clar Rosso, CEO, (ISC)² Aanchal Gupta, CISSP, vice president of Azure Security, Microsoft Lori Ross O’Neil, CISSP, senior ICS cyber security researcher & project manager, Pacific Northwest National Laboratory, vice chairperson, (ISC)² Board of Directors Megan... Read more →

Celebrating Women in Cybersecurity and Committing to Diversity, Equity and Inclusion

Today is International Women’s Day and what better way to celebrate it than with a glimpse into the careers of four successful women in cybersecurity. At 11 a.m. ET, (ISC)2 will host “Celebrating International Women’s Day: Carving a Cybersecurity Career Path.” This group of accomplished security professionals will come together to discuss why women should be interested in joining the cybersecurity field and ways to encourage this. They will also share highlights in their own journeys in the profession that led them to the leadership positions they now hold. You can attend the event live or watch the replay by... Read more →

Global Achievement Awards - What's new in 2021?

Nominations are now open for the (ISC)² Global Achievement Awards. These awards recognize individuals whose excellence, leadership and volunteer efforts have significantly advanced the cybersecurity industry and contributed to the vision of inspiring a safe and secure cyber world. Most awards are open to both (ISC)² members and non-members, though self-nomination is not permitted. Individual awards for cybersecurity professionals throughout their career include: (ISC)² Government Professional Award (ISC)² Rising Star Professional Award (ISC)² Mid-Career Award (ISC)² Senior Professional Award Additionally, the following awards which were previously selected exclusively by the (ISC)² Board of Directors are now open to nominations from... Read more →

(ISC)² Cybersecurity Webinars Available On-Demand on BrightTalk

Going forward, all (ISC)² webinars, recorded and live, will be available on the BrightTALK platform. All recorded Solutions Summits from 2020 have moved from BlueSky to BrightTALK. This consolidation will provide a seamless viewing experience for you on one platform and with one login. Members who are logged in will automatically receive CPE credits when viewing live or recorded webinars. Free Cybersecurity Webinars. Earn CPE Credits. Solutions Summits are typically three-part webinar series which provide three CPE credits. Check out these archived Solutions Summits from 2020: Top Cybersecurity Threats Every Online Business Should Know Online businesses are particularly vulnerable to... Read more →

Workforce Study: Reviewing Cybersecurity’s Pandemic Response

In a year that presented so many challenges – a global pandemic, social unrest and an economic downturn – one success is worth noting: When cybersecurity professionals were called upon to secure remote environments in a hurry, they stepped up. As many companies were forced to shift to a work-from-home model because of COVID-19 for most or all employees, cybersecurity teams went to work on securing both these newly created remote environments and existing corporate networks. Data from (ISC)²’s 2020 Cybersecurity Workforce Study shows respondents believe those efforts were largely successful. Even though 30% of cybersecurity professionals had a deadline... Read more →

#ISC2CONGRESS ‘We Got This:’ Adaptability Is Nothing New to Cybersecurity

During her (ISC)2 Security Congress 2020 keynote speech, Juliette Kayyem used three words that tidily sum up the can-do spirit of the cybersecurity community: “We got this.” Kayyem, a former assistant secretary at the Department of Homeland Security, was speaking within the context of society’s ability to adapt, learn and build resilience during the COVID-19 crisis. Still, her remarks reflect the general ethos of the cybersecurity profession. Cybersecurity professionals recognize that if they can’t say, “we got this,” the alternative is too alarming to fathom. Cybersecurity workers have to adapt – all the time. Just like what society at large... Read more →

#ISC2CONGRESS: Post-Incident Reviews As Prevention

If there is one thing adversity can teach you, it’s how to avoid bad situations in the future. Or so you would think. But when it comes to incident response, most organizations fail to conduct a post-incident review (PIR) or when they do, it tends to be ineffective, according to Faranak Firozan, who works in Incident Response for NVIDIA. As part of the (ISC)2 Security Congress 2020, Faranak delivered a presentation on PIR components and goals. She stressed the importance of PIRs in determining the causes of a security incident, its effects and the lessons an organization can learn to... Read more →

Until Further Notice: #ISC2Congress Keynote Prescribes Adaptive Recovery and Resilience in Cybersecurity to Deal With Ongoing Pandemic

For anyone hoping the COVD-19 crisis will come to a quick end, former Homeland Security Assistant Secretary Juliette Kayyem offered some sobering words today: The virus will be with us for the foreseeable future. “I have to be blunt and tell you this period is going to exist until further notice. We are going to have to learn to live with the virus. Once you get your head around that, then the solution becomes clear,” Kayyem said. She delivered her remarks virtually as the third and final keynote speaker at (ISC)2 Security Congress 2020. Kayyem focused her talk on what... Read more →

#ISC2Congress: Recruiter: COVID Had a Minimal Impact on the Cybersecurity Job Market

The COVID-19 pandemic delivered a serious blow to the global economy, but plenty of job opportunities remain in the cybersecurity field, according to Kris Rides, CEO of cybersecurity staffing company Tiro Security. There were cybersecurity layoffs, Rides said, but in much smaller numbers than in industries such as travel and entertainment, which have taken the brunt of the pandemic’s economic impact. Cybersecurity “is one area where companies couldn’t really afford to lay off people,” Rides said, during a virtual presentation as part of the (ISC)2 2020 Security Congress taking place this week. Kris Rides, CEO of Tiro Security The pandemic’s... Read more →

#ISC2Congress: Light Bulb Moment: The Job of Cybersecurity Professionals Is About Assessing Risk

Cybersecurity expert Joseph Carson, CISSP, learned a valuable lesson after conducting a penetration test at a power station that took him four months of preparation: How you communicate your findings to an organization’s leadership makes all the difference in how they decide to act on the information. During a virtual presentation as part of the (ISC)2 2020 Security Congress, Carson, who serves as Thycotic’s chief security scientist and advisory CISO, said he was shocked when the power utility’s board essentially shrugged off his findings. After all, he thought the findings were pretty damning. Get this: After spending a morning inside... Read more →

#ISC2CONGRESS – Tuesday Keynote: Protecting Yourself During the Pandemic

Graham Cluley Despite the substantial increase in remote working since the start of the COVID-19 pandemic, security breaches have stayed about the same for the vast majority of people and businesses, according to security expert Graham Cluley, an award-winning blogger who provided the Tuesday keynote speech at this year’s virtual (ISC)2 Security Congress. Only one in 10 businesses say they have experienced a dramatic increase in attacks, Cluley said, before quickly adding that attacks don’t always result in breaches. As a matter of fact, research shows breaches increased by only one percentage point over the past 12 months, to 16%... Read more →

#ISC2Congress Panel: Finding The Balance Between Skill and Usability

When does technology become too easy to use? And when does simplicity start working against you? These were among the many the questions tackled by a group of panelists during a 2020 (ISC)² Security Congress virtual session called “Easily Deployed and Sold Short.” At issue was whether easy-to-use user interfaces on complex security tools make it more difficult for cybersecurity team leaders to figure out what skills their team members have mastered. Timothy Robnett, vCISO at Wavefront Consulting, made no bones about it: “A simple UX makes it harder to promote somebody,” he said. Simplicity of use, he said, doesn’t... Read more →