Associate of (ISC)²

Fast Track Your Career, with the Support and Strength of (ISC)²

If you’re a student or career changer considering moving into the field of information security, or just starting out in the Information Security workforce, you are eligible to become an Associate of (ISC)². By aligning yourself with the first name in information security, you’re jumping ahead of thousands of others vying for solid positions in the early stages of their careers.

As an Associate of (ISC)², you can take advantage of the complete suite of (ISC)² support:

• Forums
• Communication
• Peer networking
• Educational opportunities

Who is a Candidate?

The Associate of (ISC)² status is available to qualified candidates who:

• Subscribe to the (ISC)² Code of Ethics
• Pass the CAP®, CISSP®, CSSLP® or SSCP® certification exams based on the (ISC)² CBK®, our taxonomy of information security topics.
• Once Associate of (ISC)² status is obtained, a minimum of Continuing Professional Education (CPE) credits in accordance with the appropriate Associate of (ISC)² designation and Annual Maintenance Fees (AMFs) of $US35 are required.

Information security is an immensely rewarding career with unlimited possibilities, with a career partner like (ISC)².

SSCP® - Systems Security Certified Practitioner

Jumpstart Your Career with the Best Entry Level IT Security Certification

Whether you are looking to advance your current position in the information security field, expand upon your existing IT skills or launch a new career in either of these areas, you should seriously consider the SSCP from (ISC)²®. The SSCP is open to all candidates with as little as one year experience, making it an ideal starting point for a new career in infosec or to add that layer of security you need in your current IT career.

The SSCP is ideal for those working in or towards positions such as:

• security	• network security engineer
• systems analyst	• information systems auditor
• application programmer	• security administrator
• systems administrator	• network administrator
• database administrator	• business unit representative
• systems analyst	• security architect
• security consultant/specialist	• information assurance technician

Globally Recognized Proficiency in IT Security

Demonstrate your security knowledge in one of the fastest-growing fields in IT with the SSCP credential from (ISC)², the world leader in educating and certifying security professionals worldwide.

The SSCP credential ensures that candidates continuously monitor systems to safeguard against security threats while having the knowledge to apply security concepts, tools and procedures to react to security incidents.

The SSCP credential demonstrates competency in the following CBK® domains:

• Access Controls
• Cryptography
• Malicious Code and Activity
• Monitoring and Analysis
• Networks and Communications
• Risk, Response and Recovery
• Security Operations and Administration
• All (ISC)² certifications are accredited by the International Organization for Standardization (ISO) and the American National Standards Institute (ANSI).

CAP® - Certified Authorization Professional

An In-Demand Position for the In-Control Individual

The Certified Authorization Professional (CAP) certification is an objective measure of the knowledge, skills and abilities required for personnel involved in the process of authorizing and maintaining information systems. Specifically, this credential applies to those responsible for formalizing processes used to assess risk and establish security requirements and documentation. Their decisions will ensure that information systems possess security commensurate with the level of exposure to potential risk, as well as damage to assets or individuals.

The CAP credential is appropriate for commercial markets, civilian and local governments, and the U.S. Federal government including the State Department and the Department of Defense (DoD). Job functions such as authorization officials, system owners, information owners, information system security officers, and certifiers as well as all senior system managers apply.

The ideal candidate should have experience, skills or knowledge in:

• IT Security
• Information Assurance
• Information Risk Management
• Certification
• Systems Administration
• One - two years of general technical experience
• Two years of general systems experience
• One - two years of database/systems development/network experience
• Information Security Policy
• Technical or auditing experience within government, the U.S. Department of Defense, the financial or health care industries, and/or auditing firms
• Strong familiarity with NIST documentation

The CAP examination tests the breadth and depth of a candidate’s knowledge by focusing on the seven domains of the CAP CBK®:

• Understand the Security Authorization of Information Systems
• Categorize Information Systems
• Establish the Security Control Baseline
• Apply Security Controls
• Assess Security Controls
• Authorize Information System
• Monitor Security Controls

All (ISC)² certifications are accredited by the International Organization for Standardization (ISO) and the American National Standards Institute (ANSI).

CSSLP® - Certified Secure Software Lifecycle Professional

Note: Effective April 1, 2013, the CSSLP exam will be based on the new exam blueprint, or Detailed Content Outline (DCO). The professional work experience requirement for the CSSLP remains four years, but the domains have changed. Please refer to the CSSLP Candidate Information Bulletin for details

The Application Security Certification from the Industry Leader

With the CSSLP® certification from (ISC)², your application security competency within the software development lifecycle (SDLC) will be validated. You'll not only be seen as an industry leader in application security, but as a leader within your organization as well. A status you'll rightly deserve because you'll have proven your proficiency in:

• Developing an application security program in your organization
• Reducing production costs, application vulnerabilities and delivery delays
• Enhancing the credibility of your organization and its development team
• Reducing loss of revenue and reputation due to a breach resulting from insecure software

Why CSSLP?

Application vulnerabilities affect our everyday lives. In order to make the cyber world a safer place, we must ensure web application security is a priority. It's no wonder that application vulnerabilities was ranked the #1 threat to information security professionals in the 2011 (ISC)² Global Information Security Workforce Study.

Who is the CSSLP credential for?

The Certified Secure Software Lifecycle Professional (CSSLP) is for everyone involved in the SDLC with at least 4 years' experience.

Don't have the application security experience to earn your certification? Earn your experience to become a CSSLP as an Associate of (ISC)² by successfully passing the CSSLP CBT exam. You'll have 5 years to earn your experience.

CISSP® - Certified Information Systems Security Professional

Globally Recognized Expertise in the Field of Information Security

CISSP® certification is a globally recognized standard of achievement that confirms an individual's knowledge in the field of information security. CISSPs are information assurance professionals who define the architecture, design, management and/or controls that assure the security of business environments. It was the first certification in the field of information security to meet the stringent requirements of ISO/IEC Standard 17024.

Confirming One's Knowledge and Experience

The CISSP exam tests one's competence in the ten CISSP domains of the (ISC)²® CBK®, which cover critical topics in security today, including risk management, cloud computing, mobile security, application development security and more. Candidates must have a minimum of five years of experience in two of the ten domains. This vast breadth of knowledge and the experience it takes to pass the exam is what sets the CISSP apart.

CISSPs often hold job functions including:

• Security Consultant	• Security Analyst
• Security Manager	• Security Systems Engineer
• IT Director/Manager	• Chief Information Security Officer
• Security Auditor	• Director of Security
• Security Architect	• Network Architect

The CISSP exam is based on the following ten domains:

• Access Control
• Telecommunications and Network Security
• Information Security Governance and Risk Management
• Software Development Security
• Cryptography
• Security Architecture and Design
• Operations Security
• Business Continuity and Disaster Recovery Planning
• Legal, Regulations, Investigations and Compliance
• Physical (Environmental) Security

Don't yet have the necessary experience? If you're working on building your experience right now, you may earn the Associate of (ISC)² designation by passing the required CISSP examination.

All (ISC)² certifications are accredited by the International Organization for Standardization (ISO) and the American National Standards Institute (ANSI).

Disclaimer:
The data contained on these pages is supplied for informational purposes only. It was acquired from internet resources posted by the actual governing body of the certification providers. To the best of our knowledge, the information is accurate and up-to-date as of the date we published it to our sites. CBT Campus does not guarantee the accuracy or claim to know the current policies of these organizations. We highly recommend that you research any and all certification requirements from these organizations on your own.

For more information on IIBA certifications, visit
https://www.isc2.org/credentials/default.aspx