From Wikipedia, the free encyclopedia
Jump to: navigation, search
International Information System Security Certification Consortium
(ISC)² logo (vectorized).svg
Founded 1988
Type non-profit
Focus Information Security
Area served
Services Professional Certifications
101,567 (2012)[1]
Slogan Security Transcends Technology[2]
Mission We make society safer by improving productivity, efficiency and resilience of information-dependent economies through information security education and certification[2]
Website www.isc2.org

The International Information System Security Certification Consortium, or (ISC)², is a non-profit organization which specializes in information security education and certifications.[3][4] It has been described as the "world's largest IT security organization".[5] The most widely known certification offered by (ISC)² is the Certified Information Systems Security Professional (CISSP) certification. [6][7]


In the mid-1980s a need arose for a standardized and vendor-neutral certification program that provided structure and demonstrated competence. In November 1988, the Special Interest Group for Computer Security (SIG-CS), a member of the Data Processing Management Association (DPMA), brought together several organizations interested in this. The (ISC)² was formed in mid-1989 as a non-profit organization with this goal.[8]

By 1990, the first working committee to establish something called the Common Body of Knowledge (CBK) had been formed. The work done by that committee resulted in the first version of CBK being finalized by 1992, with the CISSP credential launched by 1994, followed by the SSCP credential in 2001, the CAP credential in 2005, and the CSSLP credential in 2008.[9]

Since 2011, (ISC)² organizes the annual (ISC)² Security Congress, which is co-located with the ASIS International Annual Seminar and Exhibits, with more than 20000 professionals attending.[6][10]

In March 2012, (ISC)² announced a strategic alliance with the not-for-profit organisation IT Acquisition Advisory Council[11]

Professional Certifications[edit]

(ISC)² maintains what it calls a Common Body of Knowledge for information security for the following certifications:[2]

It is certified by ANSI that (ISC)² meets the requirements of ANSI/ISO/IEC Standard 17024, a personnel certification accreditation program. As of 2012, that accreditation covers the CISSP, SSCP, ISSEP, ISSAP, ISSMP, CAP, and CSSLP certifications.[12]

Continuous Professional Education[edit]

All (ISC)² certified professionals are required to earn Continuous Professional Education (CPE) credits on an annual basis in order to keep up their certifications. CPE credits can be obtained by attending industry events or conferences, writing articles/book reviews/books, etc.[13]

Code of Ethics[edit]

All certified (ISC)² professionals are required to support the (ISC)² code of ethics. Violations of the code of ethics are each investigated by a peer review panel, within the potential of revoking the certification.[14] (ISC)² (along with other security certification organizations) has been criticized for lack of education in the area of ethics.[15]

See also[edit]


External links[edit]