|Slogan||Security Transcends Technology|
|Mission||We make society safer by improving productivity, efficiency and resilience of information-dependent economies through information security education and certification|
The International Information Systems Security Certification Consortium ((ISC)²) is a non-profit organization which specializes in information security education and certifications. It has been described as the "world's largest IT security organization". The most widely known certification offered by (ISC)² is the Certified Information Systems Security Professional (CISSP) certification.
In the mid-1980s a need arose for a standardized and vendor-neutral certification program that provided structure and demonstrated competence. In November 1988, the Special Interest Group for Computer Security (SIG-CS), a member of the Data Processing Management Association (DPMA), brought together several organizations interested in this. The (ISC)² was formed in mid-1989 as a non-profit organization with this goal.
By 1990, the first working committee to establish something called the Common Body of Knowledge (CBK) had been formed. The work done by that committee resulted in the first version of CBK being finalized by 1992, with the CISSP credential launched by 1994, followed by the SSCP credential in 2001, the CAP credential in 2005, and the CSSLP credential in 2008.
In March 2012, (ISC)² announced a strategic alliance with the not-for-profit organisation IT Acquisition Advisory Council
(ISC)² maintains what it calls a Common Body of Knowledge for information security for the following certifications:
- Certified Information Systems Security Professional (CISSP), including:
- Certified Secure Software Lifecycle Professional (CSSLP)
- Certified Authorization Professional (CAP)
- Systems Security Certified Practitioner (SSCP)
- Certified Cyber Forensics Professional (CCFP)
It is certified by ANSI that (ISC)² meets the requirements of ANSI/ISO/IEC Standard 17024, a personnel certification accreditation program. As of 2012, that accreditation covers the CISSP, SSCP, ISSEP, ISSAP, ISSMP, CAP, and CSSLP certifications.
Continuous Professional Education
All (ISC)² certified professionals are required to earn Continuous Professional Education (CPE) credits on an annual basis in order to keep up their certifications. CPE credits can be obtained by attending industry events or conferences, writing articles/book reviews/books, etc.
Code of Ethics
All certified (ISC)² professionals are required to support the (ISC)² code of ethics. Violations of the code of ethics are each investigated by a peer review panel, with the potential of revoking the certification. (ISC)² (along with other security certification organizations) has been criticized for lack of education in the area of ethics.
- . (ISC)²
- About (ISC)². (ISC)²
- Skills shortage means no unemployment in IT security, says (ISC)2. ComputerWeekly
- New board connects (ISC)2 security professionals to public policy. ComputerWorld UK
- (ISC)2: Execs Must Buy Into IT Security. eSecurity Planet
- (ISC)2 releases government program for conference in Philly alongside ASIS. GSN: Government Security News
- (ISC)2 at a crossroads: CISSP value vs. security industry growth. SearchSecurity
- Shon Harris (2010). All-In-One CISSP Exam Guide (5 ed.). New York: McGraw-Hill. pp. 7–8. ISBN 0-07-160217-8.
- History of (ISC)². (ISC)²
- A delegate’s view of (ISC)2 Security Congress 2012. Microsoft | Security Blog
- Pressrelease: (ISC)² announces alliance with IT-AAC, 19 March 2012. Visited 3 April 2012
- ANSI Accreditation Services - International Information Systems Security Certification Consortium, Inc. (ISC)2. ANSI
- Maintaining Your Credentials in Good Standing. (ISC)²
- (ISC)² Code Of Ethics. (ISC)²
- Security Certifications' Ethics Programs Merely Window-Dressing. SearchSecurity