(ISC)² Blog

Help Shape the CGRC Exam – Formerly Known As CAP

As practitioners know all too well, it is paramount to remain up to date with the changing landscape of cybersecurity. We regularly conduct Job Task Analysis (JTA) studies to review exam content and outlines to ensure the accuracy, relevance and excellence of all (ISC)² exams. The Certified in Governance, Risk and Compliance (CGRC), formerly known as the Certified Authorization Professional (CAP) exam, was last refreshed in 2021. The certification is undergoing a name change to more accurately reflect the knowledge, skills and abilities required to earn and maintain this certification. As part of our regular updates to exams, it is... Read more →

What It Takes to be a Cybersecurity Professional: The Non-Technical Skills You Need

Organizations around the world are being targeted – often from an unseen enemy. Cyberthreats are a plague on systems and data, and combatting them is costly and time-consuming. In order to defend against bad actors, organizations need the talent and skills on staff to detect and mitigate cyberthreats. This has led to massive opportunity in the field of cybersecurity. Research shows the global workforce needs a staggering influx of 2.7 million cybersecurity professionals to meet demand.1 Cybersecurity is a strong career choice for many reasons. It offers opportunities globally and in all industries. There are more than 50 career paths... Read more →

Considering a Career in Cybersecurity? Ask Yourself These 4 Questions

Regardless of what the economy or job market is doing, a career in cybersecurity promises near limitless possibilties. And with the current threats to cyber stability around the world, there’s never been a greater urgency for cybersecurity professionals. The latest research reveals a formidable gap in available talent — the workforce needs an influx of 2.7 million cybersecurity professionals to meet global demand.1 The data is obvious in its message. Cybersecurity is in dire need of skilled professionals and it’s costing organizations money. A recent study finds 64% experienced breaches that resulted in lost revenue and/or fines in the past... Read more →

#CybersecurityAwarenessMonth Mentorship Interview Series: Part 3 – Reverse Mentorship

In the final part of this three-part mentorship series for Cybersecurity Awareness Month we are discussing the advantages and challenges of reverse mentorship. Hear from two members who dared to embark on the complex world of reverse mentorship and shared their experiences with us. Read more about becoming a mentor and mentee in our part 1 and part 2 of this blog series. Chinatu Uzuegbu, CISSP, CEO/Managing Cyber Security Consultant at RoseTech CyberCrime Solutions Ltd. How would you describe reverse mentorship? Reverse mentorship is a process of being trained or mentored by a younger or junior position as a more... Read more →

#CybersecurityAwarenessMonth Mentorship Interview Series: Part 2 – Mentees

This Cybersecurity Awareness Month we are reviewing the three sides of mentorship by speaking with members who are experienced mentors, mentees and those who have taken part in reverse mentorship. Review our part one blog and hear from experienced mentors. In this, our second part of our three-part interview series we will hear from Jean Tam, CISSP, Cybersecurity Manager/Lead, Subject Matter Expert at Lockheed Martin on what the mentee experience is like. What drove you to seek mentorship? I was just out of college and wanted to figure out what I wanted to be when I grew up. What did... Read more →

(ISC)² Collaborates with KISA to Strengthen Cybersecurity Professional Development in Emerging Economies

Many developing countries lack the resources to secure valuable information and data effectively. To strengthen cyber defenses in these economies, additional cybersecurity professionals are needed – with the right skills and knowledge – to defend critical assets. Understanding the challenge and wanting to improve the global cybersecurity ecosystem, today (ISC)² and Korea Internet & Security Agency (KISA) signed a Memorandum of Understanding (MOU) to collaborate and leverage the expertise of our organization, as well as KISA, to nurture the global cybersecurity workforce. The collaboration will expand cybersecurity professional education and training by providing professionals with the necessary knowledge and skills... Read more →

October is #CybersecurityAwarenessMonth

The month of October is widely acknowledged as Cybersecurity Awareness Month and an opportunity for the global community to join together in the mission of educating those outside of the profession with daily practices that can be implemented so that we may all live in a safer and more secure cyber world. This month reminds us that cybersecurity is for all and doesn’t have to be overly complicated. Together we can showcase the vast resources our community has to support all organizations and industries to keep their valuable information secure. Access Resources (ISC)² has curated a collection of informational resources... Read more →

Enrollment Is Open for Free One Million Certified in Cybersecurity

(ISC)² is making a cybersecurity career more accessible. As part of our commitment to help close the cybersecurity workforce gap and diversify those working in the field, we are offering FREE (ISC)² Certified in Cybersecurity Online Self-Paced Training and exams to one million people worldwide. To qualify, individuals must enroll as an (ISC)² Candidate, for free, which entitles them to a wide array of exclusive programs and services to assist individuals starting a cybersecurity career, including free education and exams for the association’s new entry-level cybersecurity certification (ISC)² Certified in Cybersecurity. How to Enroll in One Million Certified in Cybersecurity... Read more →

Become an (ISC)² Candidate – No Exam, Experience or Fees Required

Today, (ISC)² launched a new initiative so that anyone can join our association as an (ISC)² Candidate. When you become an (ISC)² Candidate, you’ll gain access to many of the benefits and resources that (ISC)² certified members and Associates of (ISC)² enjoy – but with no exam, work experience, and, for a limited time, no fee required. Who should become an (ISC)² Candidate? We created (ISC)² Candidate for those interested in pursuing an (ISC)² certification or a career in cybersecurity. If you’re looking to join the cybersecurity workforce, this program is ideal for you! If you’ve been working in cybersecurity... Read more →

Black Hat USA 2022: Are Cybersecurity Tool Standards on the Way?

One of the biggest challenges cybersecurity teams face, aside from constantly having to foil threat actors, is to integrate data from the various tools they use to protect their organizations. But relief may be on the way in the form of the Open Cybersecurity Schema Framework (OCSF), which aims to establish an interoperability standard. News of the creation of OCSF came during Black Hat USA 2022 in Last Vegas last week. The framework boasts participation from 18 of the IT industry’s biggest names, including Amazon AWS, IBM, Palo Alto Networks, Splunk and Salesforce. Such a standard would simplify the lives... Read more →

#ISC2Congress: Empower Your Weekend with Training

Build confidence for exam day or expand your knowledge by attending Official (ISC)² Pre-Conference Training the weekend ahead of (ISC)² Security Congress. Participate by arriving in Las Vegas a couple of days early or maximize your time by joining in online on Saturday, October 8 and Sunday, October 9. Learn from (ISC)² Authorized Instructors and gain a holistic understanding of the essential topics in the course of your choice. Your instructor – who holds the certification they are teaching – provides expert knowledge with experience from practice. You will engage in thought-provoking discussions within your class and expand your education... Read more →

Unconscious Bias: How to Understand, Identify and Manage It

We all have unconscious bias. In fact, our ability to use pattern recognition and informed judgement can be a benefit in many professions, especially cybersecurity. However, unconscious biases in areas of hiring, mentoring, promoting or developing staff could hamper efforts to build the cybersecurity workforce and to diversify the individuals who make up this group. (ISC)² has partnered with Cyversity, an organization whose mission is to achieve consistent representation of women and underrepresented minorities in the cybersecurity profession, to offer a series of free webinars addressing unconscious bias. The first webinar in this series – Understanding Unconscious Bias – will... Read more →

(ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

We are excited to announce that more than 1,000 cybersecurity career hopefuls have taken their first step toward launching their careers by taking the (ISC)² entry-level cybersecurity certification pilot exam. Once they earn the certification, they will demonstrate to employers they have the foundational knowledge, skills and abilities to succeed in entry- and junior-level roles. Since the program’s inception earlier this year, more than 1,000 people around the world have taken the exam and many have registered for the (ISC)² entry-level cybersecurity certification course with their exam still to come. With the global cybersecurity workforce needing to grow by 65%... Read more →

WINNING TACTICS FOR SECURITY AWARENESS INNOVATIONS via EXPERIENCE (1 of 2)

By Samuel Rugi, an MSc Information technology (Security), Certified Information Security Professional (CISSP), Certified Information Security Management (CISM), Cybersecurity Mentor at the Cyversity Organization and a Co-Chair Leadership LaunchPad at Technology Association of Oregon. Security awareness is becoming a hot potato for most of us in the cybersecurity sector, within our organizations, local and global communities. I have spent considerable time studying and working on this technical area as part of my duties while securing and championing best practices and behavioral change within various organizations. While this is not to claim that I am a distinguished industry expert in communication... Read more →

Summary of March Inside (ISC)2 Webinar: Stay Vigilant

As the war in Ukraine rages on, (ISC)² leaders took the opportunity to remind cybersecurity practitioners in the most recent Inside (ISC)² webinar of a simple but essential message: Be vigilant. As the hostilities continue, it is possible the war will spill over into the cyber realm, said Jon France, who joined (ISC)² in January as the organization’s first CISO. Cyber is the “fourth plain after land, sea and air” in the Ukraine war, he said. France joined CEO Clar Rosso and Board of Directors Chairperson Zachary Tudor for the quarterly webinar, during which they provided updates on the organization’s... Read more →

GOING FOR (ISC)² CERTIFICATION? GET THE FACTS BEFORE YOU CHOOSE A TRAINING PROVIDER

When it comes to deciding on a training provider for CISSP and CCSP exam prep, it can be difficult to separate myth from reality as you research your options. World-class (ISC)² certifications like CISSP and CCSP are highly regarded in cybersecurity, and countless companies offer training. But not all course providers are equally qualified to get you ready for exam day. Knowledge is power when it comes to choosing the right training. Too many companies put out false claims to win your business. Don’t believe the hype! They may promise high pass rates, for example — but the fact is,... Read more →

An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

The Need for Entry-level Cybersecurity Education Is Critical As any employer who has tried to fill a vacant cybersecurity position knows, finding qualified candidates is anything but easy. The cybersecurity workforce would have to expand by 65% to meet global demand, according to (ISC)²'s 2021 Cybersecurity Workforce Study. Employers, therefore, need to keep an open mind when filling those positions by considering candidates with less experience. Once on board, however, new hires can be brought up to speed through education and certification. Even with sparse experience, a cybersecurity professional should be able to demonstrate an acceptable level of proficiency in... Read more →

TIME TO HIT THE BOOKS! TRAINING COURSE IS AVAILABLE FOR CANDIDATES PREPARING FOR THE NEW (ISC)² ENTRY-LEVEL CYBERSECURITY CERTIFICATION PILOT EXAM

To help candidates prepare for the forthcoming entry-level cybersecurity certification pilot exam, (ISC)² released a new education program—a live or on-demand expert instruction on the fundamental cybersecurity concepts and five domains covered by the certification. The five domains included in the pilot exam outline are: Security Principles Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts Access Controls Concepts Network Security Security Operations In preparation for taking the entry-level cybersecurity certification pilot exam, candidates can choose one of three live two-hour instructor-led review sessions taking place on January 25, 26 and 27. Each session will accommodate 40 students and... Read more →

No Excuses: Get Your (ISC)² Certification Done in 2022

The need is real. The shortage of cybersecurity talent presents a clear and present danger in virtually every corner of the globe as bad actors plot their next move. How wide is the gap? Recent research shows the cyber workforce must grow by 65 percent to adequately defend organizations’ critical assets.* No excuses — now is your time to commit to certification. Because a safe and secure cyber world can’t wait. (ISC)² is here to help, starting with your Exam Action Plan. Whether you’re pursuing CISSP, SSCP, CCSP, CAP, CSSLP, HCISPP or a CISSP Concentration, you’ll go into it prepared... Read more →

The Future of Work without Workers

Many people are talking about the future-of-work, but how can that even be calculated when the primary element – workers – appears to be in short supply? There has been much focus and discussion on the work-from-home and hybrid models of work, concepts that appeal to a surprisingly large contingent of the population, but they pose significant challenges to security specialists, both in the practical terms of maintaining security and Zero Trust with a distributed workforce, but also in terms of their own work choices: is it actually possible to be a CSSP or even a CISO from home? This... Read more →