ISC2 Blog

Critical Next Steps for Transitioning Military

Transitioning military personnel - come to learn valuable insights from a panel of recruitment experts as they discuss “Critical Next Steps for Transitioning Military '' on Thursday, October 26 at 3:05 pm CT in the Career Center at (ISC)2 Security Congress. Meet the Panel This military transition discussion will feature Kirsten Renner, Tiffany Robbins, and Michael McCoy. Kirsten Renner, Talent Engagement Lead at Accenture Federal Services is a passionate supporter of active-duty service members, veterans, and transitioning military job seekers, in addition to being a proud Army mom. Kirsten has a history of providing resume reviews and guidance to transitioning... Read more →

New cybersecurity express-learning opportunities with (ISC)² Skill-Builders

Cybersecurity never stands still. It’s a constantly evolving field that requires constant learning to stay in front of cyberthreats. (ISC)² Skill-Builders are a new way to stay current and demonstrate your knowledge of emerging cybersecurity topics. The quick, on-demand learning from cybersecurity’s leading professional organization features content created by industry experts. Learning activities focused on real-world activities ensure the content is accessible and relevant. Anyone can access the courses anytime, anywhere. (ISC)² Skill-Builders dive into the following focus areas: Entry-Level Cybersecurity Skill-Builders - Learn valuable fundamental skills as you pursue a career in cybersecurity. Cloud Security - Get up to... Read more →

Security Administration and Operations Demands a Big Picture View

In today’s ever-evolving digital landscape, cybersecurity is more critical than ever. With the rise of cyberthreats, organizations worldwide are facing unprecedented challenges in protecting their data and systems from breach and attack. The constant need to stay one step ahead of bad actors means the stakes are high. Attention to the issue of cybersecurity has never been higher. In the United States, the Biden Administration recently unveiled a new National Cybersecurity Strategy that outlines the priorities The White House notes as most pressing. It calls for enhanced regulations, improved communication and information sharing between government and private sectors and an... Read more →

Security Engineering Careers Offer Promising ROI and Opportunities

The global outlook on cybercrime is challenging. A recent survey conducted by the Deloitte Center for Controllership finds that almost half of top-level management executives (48.8%) anticipate a rise in the frequency and scale of cyberattacks aimed at their organizations’ financial and accounting data in the coming year. More than a third (34.5%) said it had been targeted in the past year by cybercriminals. Among this group, 22% experienced at least one cyberattack and 12.5% experienced more than one. At the same time, research shows cybersecurity is in critical need for more professionals. To adequately protect cross-industrial enterprises from increasingly... Read more →

Infosecurity Europe: Are Certifications a Barrier to Widening the Cybersecurity Talent Pool?

Is the importance of certifications at risk of turning them into check box hiring aids for organizations in a hurry? A CISO panel at this week’s Infosecurity Europe conference weighed up the arguments. By John E. Dunn Certifications are a signal of personal achievement, professional development, and hiring credibility. But at a time of skills shortages are they at risk of being misunderstood and misapplied in ways that might sometimes turn them into a barrier to better cybersecurity? It’s a complex topic that was given an airing at this week’s Infosecurity Europe conference session What’s the Point of Cyber Security Certifications?... Read more →

From Silo to Synergy between Cybersecurity and Privacy in Europe

The International Association of Privacy Professionals (IAPP) and (ISC)² recently collaborated on a pair of webinars, bringing a panel together to shine a light on the intersection of cybersecurity and privacy. After looking at the landscape in the U.S., we now turn our attention to Europe. The conversation brought together conversation Isabelle Roccia, IAPP managing director Europe, Christian Toon, CISO at Pinsent Masons Law Company, Anna Zeiter, CPO at eBay and Ilias Chantzos, global & privacy officer at Broadcom. By John E. Dunn  The reality of data breaches is causing the structure of corporate management to rapidly evolve. The traditional model... Read more →

Infosecurity Europe 2023 Preview – Our Pick of the Keynote Sessions

In the first of two previews of Infosecurity Europe 2023, we look at our top picks for unmissable keynote sessions across the three days of the conference, held at ExCel in London from June 20-22. By John E. Dunn As the pivotal cybersecurity conference in the region, every Infosecurity Europe conference is oriented to topical themes. This year is no exception, with the speaker lineup covering everything from the on-going anxiety of cyberwar, how zero trust can be made to work once it leaves the drawing board, and the never-ending puzzle of assessing supply chain risk. The following is our... Read more →

New and improved online training for CISSP from (ISC)²

You’re ready to take the lead in your career by earning the Certified Information Systems Security Professional (CISSP®) certification. Getting CISSP-certified opens expanded opportunities worldwide in top-level cybersecurity roles and career advancement. The demand for certified professionals is so hot, CISSP is the No. 1 security credential required by hiring managers on LinkedIn. CISSP has earned its reputation as the gold standard certification in cybersecurity due in large part to its rigor. Becoming CISSP-certified takes preparation and planning. Two online training options from (ISC)², the creator of the CISSP Common Body of Knowledge (CBK®), will help you prepare for the... Read more →

Healthcare is one of the most targeted industries for cyberattacks due to the large amount of sensitive data it manages

Medical records and personal identifying information have high value on the black market. Criminals know this, and, as a result, healthcare has seen an alarming increase in cyberattacks in recent years. Ransomware attacks, where hackers encrypt hospital systems and demand payment to restore access, are a common type of cyberattack on healthcare organizations. According to research published in JAMA Health Forum, the annual number of ransomware attacks against healthcare entities more than doubled to 91 reported cases in 2021 from 43 cases in 2016. The stakes to regain access from ransomware attacks are alarmingly high — it’s not just data... Read more →

New adaptive platform customizes online certification training for a personalized experience

We all learn differently. And we all have different schedules and needs when it comes to certification training. In the past, finding the time to train has been limiting for some. Enter adaptive online training, a new and innovative way to prep for certification that uses artificial intelligence (AI) to tailor the learning journey to each individual’s needs. It provides a non-linear, personalized learning experience that works well for busy professionals who want to upskill without having to rely on traditional linear learning models, which can be restrictive about time and pace. How it works (ISC)² is leading the way... Read more →

Help Shape the CGRC Exam – Formerly Known As CAP

As practitioners know all too well, it is paramount to remain up to date with the changing landscape of cybersecurity. We regularly conduct Job Task Analysis (JTA) studies to review exam content and outlines to ensure the accuracy, relevance and excellence of all (ISC)² exams. The Certified in Governance, Risk and Compliance (CGRC), formerly known as the Certified Authorization Professional (CAP) exam, was last refreshed in 2021. The certification is undergoing a name change to more accurately reflect the knowledge, skills and abilities required to earn and maintain this certification. As part of our regular updates to exams, it is... Read more →

What It Takes to be a Cybersecurity Professional: The Non-Technical Skills You Need

Organizations around the world are being targeted – often from an unseen enemy. Cyberthreats are a plague on systems and data, and combatting them is costly and time-consuming. In order to defend against bad actors, organizations need the talent and skills on staff to detect and mitigate cyberthreats. This has led to massive opportunity in the field of cybersecurity. Research shows the global workforce needs a staggering influx of 2.7 million cybersecurity professionals to meet demand.1 Cybersecurity is a strong career choice for many reasons. It offers opportunities globally and in all industries. There are more than 50 career paths... Read more →

Considering a Career in Cybersecurity? Ask Yourself These 4 Questions

Regardless of what the economy or job market is doing, a career in cybersecurity promises near limitless possibilties. And with the current threats to cyber stability around the world, there’s never been a greater urgency for cybersecurity professionals. The latest research reveals a formidable gap in available talent — the workforce needs an influx of 2.7 million cybersecurity professionals to meet global demand.1 The data is obvious in its message. Cybersecurity is in dire need of skilled professionals and it’s costing organizations money. A recent study finds 64% experienced breaches that resulted in lost revenue and/or fines in the past... Read more →

#CybersecurityAwarenessMonth Mentorship Interview Series: Part 3 – Reverse Mentorship

In the final part of this three-part mentorship series for Cybersecurity Awareness Month we are discussing the advantages and challenges of reverse mentorship. Hear from two members who dared to embark on the complex world of reverse mentorship and shared their experiences with us. Read more about becoming a mentor and mentee in our part 1 and part 2 of this blog series. Chinatu Uzuegbu, CISSP, CEO/Managing Cyber Security Consultant at RoseTech CyberCrime Solutions Ltd. How would you describe reverse mentorship? Reverse mentorship is a process of being trained or mentored by a younger or junior position as a more... Read more →

#CybersecurityAwarenessMonth Mentorship Interview Series: Part 2 – Mentees

This Cybersecurity Awareness Month we are reviewing the three sides of mentorship by speaking with members who are experienced mentors, mentees and those who have taken part in reverse mentorship. Review our part one blog and hear from experienced mentors. In this, our second part of our three-part interview series we will hear from Jean Tam, CISSP, Cybersecurity Manager/Lead, Subject Matter Expert at Lockheed Martin on what the mentee experience is like. What drove you to seek mentorship? I was just out of college and wanted to figure out what I wanted to be when I grew up. What did... Read more →

(ISC)² Collaborates with KISA to Strengthen Cybersecurity Professional Development in Emerging Economies

Many developing countries lack the resources to secure valuable information and data effectively. To strengthen cyber defenses in these economies, additional cybersecurity professionals are needed – with the right skills and knowledge – to defend critical assets. Understanding the challenge and wanting to improve the global cybersecurity ecosystem, today (ISC)² and Korea Internet & Security Agency (KISA) signed a Memorandum of Understanding (MOU) to collaborate and leverage the expertise of our organization, as well as KISA, to nurture the global cybersecurity workforce. The collaboration will expand cybersecurity professional education and training by providing professionals with the necessary knowledge and skills... Read more →

October is #CybersecurityAwarenessMonth

The month of October is widely acknowledged as Cybersecurity Awareness Month and an opportunity for the global community to join together in the mission of educating those outside of the profession with daily practices that can be implemented so that we may all live in a safer and more secure cyber world. This month reminds us that cybersecurity is for all and doesn’t have to be overly complicated. Together we can showcase the vast resources our community has to support all organizations and industries to keep their valuable information secure. Access Resources (ISC)² has curated a collection of informational resources... Read more →

Enrollment Is Open for Free One Million Certified in Cybersecurity

(ISC)² is making a cybersecurity career more accessible. As part of our commitment to help close the cybersecurity workforce gap and diversify those working in the field, we are offering FREE (ISC)² Certified in Cybersecurity Online Self-Paced Training and exams to one million people worldwide. To qualify, individuals must enroll as an (ISC)² Candidate, for free, which entitles them to a wide array of exclusive programs and services to assist individuals starting a cybersecurity career, including free education and exams for the association’s new entry-level cybersecurity certification (ISC)² Certified in Cybersecurity. How to Enroll in One Million Certified in Cybersecurity... Read more →

Become an (ISC)² Candidate – No Exam, Experience or Fees Required

Today, (ISC)² launched a new initiative so that anyone can join our association as an (ISC)² Candidate. When you become an (ISC)² Candidate, you’ll gain access to many of the benefits and resources that (ISC)² certified members and Associates of (ISC)² enjoy – but with no exam, work experience, and, for a limited time, no fee required. Who should become an (ISC)² Candidate? We created (ISC)² Candidate for those interested in pursuing an (ISC)² certification or a career in cybersecurity. If you’re looking to join the cybersecurity workforce, this program is ideal for you! If you’ve been working in cybersecurity... Read more →

Black Hat USA 2022: Are Cybersecurity Tool Standards on the Way?

One of the biggest challenges cybersecurity teams face, aside from constantly having to foil threat actors, is to integrate data from the various tools they use to protect their organizations. But relief may be on the way in the form of the Open Cybersecurity Schema Framework (OCSF), which aims to establish an interoperability standard. News of the creation of OCSF came during Black Hat USA 2022 in Last Vegas last week. The framework boasts participation from 18 of the IT industry’s biggest names, including Amazon AWS, IBM, Palo Alto Networks, Splunk and Salesforce. Such a standard would simplify the lives... Read more →