International Information System Security Certification Consortium
Founded1989
TypeNon-profit
FocusCybersecurity, Information Security, Software Security, Infrastructure Security
Location
Area served
Worldwide
ServicesProfessional Certifications
Members
500,000+ (2023)
Clar Rosso
Websitehttps://www.isc2.org

The International Information System Security Certification Consortium, or ISC2, is a non-profit organization which specializes in training and certifications for cybersecurity professionals.[1][2] It has been described as the "world's largest IT security organization".[3] The most widely known certification offered by ISC2 is the Certified Information Systems Security Professional (CISSP) certification.[4][5]

History

In the mid-1980s a need arose for a standardized and vendor-neutral certification program that provided structure and demonstrated competence in the field of IT security, and several professional societies recognized that certification programs attesting to the qualifications of information security personnel were desperately needed.

In June 1988, a conference was hosted by the National Institutes of Standards and Technology (NIST) and the Federal Information Systems Security Educators Association (FISSEA) at Idaho State University in Pocatello, Idaho to address the need for standardized curriculum for the burgeoning profession. Organizations in attendance included:

During the conference, the question was raised why virtually every group represented, save NIST and ISU, was creating a professional certification. The conference participants agreed to form a consortium that would attempt to bring together the competing agendas of the various organizations. In November 1988, the Special Interest Group for Computer Security (SIG-CS), a member of the Data Processing Management Association (DPMA), brought together several organizations interested in this. The ISC2 was formed in mid-1989 as a non-profit organization with this goal in mind.

By 1990, the first working committee to establish something called the Common Body of Knowledge (CBK) had been formed. The work done by that committee resulted in the first version of CBK being finalized by 1992, with the CISSP credential launched by 1994, followed by the SSCP credential in 2001, the CAP credential in 2005, and the CSSLP credential in 2008, the CCFP and HCISPP in 2013 and the CCSP in 2015.

In 2001, ISC2 established its Europe, Middle East and Africa regional office in London. In 2002, ISC2 opened its Asia-Pacific regional office in Hong Kong. In 2015, ISC2 introduced its North America regional office in Washington, D.C.

Since 2011, ISC2 organizes the annual ISC2 Security Congress conference. The 2019 conference will be the first international iteration of the event and will be held in Orlando, Florida.

In 2022, ISC2 pledged to expand and diversify the cybersecurity workforce by providing free ISC2 Certified in Cybersecurity education and exams to one million people worldwide.[6]

In August 2023, ISC2 launched their new website and rebrand, changing the abbreviation of their name from (ISC)2 to ISC2.[7]

Professional certifications

ISC2 maintains what it calls a Common Body of Knowledge for information security for the following certifications:[8]

and including:

  • Certified in Cybersecurity (CC)
  • Certified Secure Software Lifecycle Professional (CSSLP)
  • Certified Cloud Security Professional (CCSP)
  • Systems Security Certified Practitioner (SSCP)
  • Health Care Information Security and Privacy Practitioner (HCISPP) (credential set to sunset December 1, 2026)[9]
  • Certified in Governance, Risk and Compliance Certification (CGRC) (formally Certified Authorization Professional (CAP))

All ISC2 certifications are accredited and meet ANSI/ISO/IEC Standard 17024.[10] Additionally, all certifications other than the CC meet DoD 8570.1 Baseline Certification standards.[11] The CGRC is still listed as CAP on the DoD's table.

Continuous Professional Education

All ISC2 certified professionals are required to earn Continuous Professional Education (CPE) credits on an annual basis in order to maintain their certifications. CPE credits can be obtained by attending industry events or conferences, writing articles/book reviews/books, etc.[12]

Code of Ethics

All certified ISC2 professionals are required to support the ISC2 Code of Ethics. Violations of the code of ethics are each investigated by a peer review panel, within the potential of revoking the certification.[13] ISC2 (along with other security certification organizations) has been criticized for lack of education in the area of ethics.[14]

See also

References

  1. ↑ Skills shortage means no unemployment in IT security, says (ISC)2. ComputerWeekly
  2. ↑ New board connects (ISC)2 security professionals to public policy. ComputerWorld UK
  3. ↑ (ISC)2: Execs Must Buy Into IT Security. eSecurity Planet
  4. ↑ (ISC)2 releases government program for conference in Philly alongside ASIS Archived 2013-05-21 at the Wayback Machine. GSN: Government Security News
  5. ↑ (ISC)2 at a crossroads: CISSP value vs. security industry growth. SearchSecurity
  6. ↑ (ISC)² Opens Global Enrollment for One Million Certified in Cybersecurity
  7. ↑ "ISC2 Announces Major Milestone as Community Grows to Half a Million Strong". www.isc2.org. Retrieved 2023-08-17.
  8. ↑ About (ISC)2. (ISC)2
  9. ↑ ISC2 - HCISPP
  10. ↑ ANSI Accreditation Services - International Information System Security Certification Consortium, Inc. (ISC)2 as of 12 December 2023
  11. ↑ DoD Cyber Exchange - DoD Approved 8570 Baseline Certifications as of 12 December 2023
  12. ↑ Maintaining Your Credentials in Good Standing. (ISC)2 visited 26 August 2016
  13. ↑ (ISC)2 Code Of Ethics. (ISC)2
  14. ↑ Security Certifications' Ethics Programs Merely Window-Dressing Archived 2013-05-21 at the Wayback Machine. SearchSecurity
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.