Welcome Guest. | Log In | Register | Membership Benefits

New Associate of (ISC) Programs For CSSLP And CAP Help Aspiring Professionals Prepare For Careers In Cyber Security

Program expansion part of push to fill the pipeline of qualified cybersecurity professionals

Jan 12, 2012 | 02:37 PM | 


Palm Harbor, Fla., U.S.A., January 12, 2012 – (ISC)' (“ISC-squared”), the world’s largest information security professional body and administrators of the CISSP', today announced the expansion of the Associate of (ISC) program to include the Certified Secure Software Lifecycle Professional (CSSLP') and Certified Authorization Professional (CAP') credentials. Already available for the Certified Information Systems Security Professional (CISSP') and Systems Security Certified Practitioner (SSCP') credentials, the Associate of (ISC) program allows aspiring information security professionals to sit for a credential exam to assess their knowledge and build their professional network while they’re gaining the work experience required to become certified.

Upon passing either the CISSP, CSSLP, CAP or SSCP exams, which test a candidate’s understanding of the applicable CBK•, (ISC)'s taxonomy of global information security topics, the Associate of (ISC) will gain access to an elite peer network and career development resources offered exclusively to (ISC) members. Additionally, Associates of (ISC) gain access to the same benefits as (ISC)2’s certified members, including a suite of career development and support programs, such as a job search site, career clinics, virtual communities, networking events and continuing education opportunities.

Associates must subscribe to and abide by the (ISC) Code of Ethics, earn continuing education credits annually and pay annual membership fees. To become certified, Associates of (ISC)2 must gain the requisite work experience for the credential they are pursuing within five years for CSSLP and within three years for CAP and be endorsed by an (ISC)-certified professional in good standing.

While open to all interested candidates, the Associate program is also a resource for universities looking to support graduates’ transition into professional life and maps to the Workforce Framework being established by US Government National Initiative for Cybersecurity Education (NICE) Initiative. “We welcome (ISC)2’s commitment to the advancement of the professionalization of the cybersecurity workforce,” says NICE National Lead, Dr. Ernest McDuffie. “Our Cybersecurity Workforce Framework document lays a foundation for the various competences that comprise cybersecurity and provides certification companies and academic institutions a common starting point to map course work and certifications to a recognized set of cybersecurity skills. We appreciate the support that (ISC)2 and the certification community has demonstrated in terms of open dialog and several ongoing efforts where certifications and courses are being mapped to the NICE Cybersecurity Workforce Framework.”

“The Associate program is a great way for those early in their careers to assess their knowledge and certification readiness and to show employers they are committed to practicing the highest standards and ethics in the field,” said W. Hord Tipton, CISSP-ISSEP, CAP, executive director of (ISC). “Given the government’s current shortage of information security professionals, we are pleased to offer the Associate program to help increase the number of skilled professionals that our cyber threat landscape requires. This program furthers (ISC)'s commitment to serving the needs of information security professionals at any age and/or stage of their careers as they travel along their career paths.”

The CSSLP, designed for professionals involved in the software lifecycle, requires four years of professional experience in the software development lifecycle (SDLC) in one or more of the seven domains of the (ISC) CSSLP CBK, while the CAP, designed for professionals responsible for formalizing processes used to assess risk and establishing security requirements and documentation, requires two years of work experience in one or more of the seven domains of the (ISC) CAP CBK.

The CSSLP and CAP exams are available to candidates worldwide. For more information on the Associate program, please visit https://www.isc2.org/associates/default.aspx.

About (ISC)2 (ISC) is the largest not-for-profit membership body of certified information security professionals worldwide, with over 80,000 members in more than 135 countries. Globally recognized as the Gold Standard, (ISC) issues the Certified Information Systems Security Professional (CISSP•) and related concentrations, as well as the Certified Secure Software Lifecycle Professional (CSSLP•), Certified Authorization Professional (CAP•), and Systems Security Certified Practitioner (SSCP•) credentials to qualifying candidates. (ISC)’s certifications are among the first information technology credentials to meet the stringent requirements of ISO/IEC Standard 17024, a global benchmark for assessing and certifying personnel. (ISC) also offers education programs and services based on its CBK', a compendium of information security topics. More information is available at www.isc2.org



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS












Featured Webcasts
Featured Whitepapers
Featured Reports
Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:ssl-vpn end-point interrogator/installer activex control
Published:2010-11-03
Severity:High
Description:Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
Vulnerability:gvim
Published:2010-11-03
Severity:High
Description:Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
Vulnerability:cforms
Published:2010-11-03
Severity:Medium
Description:Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
Vulnerability:links, wsn links, wsn links
Published:2010-11-03
Severity:High
Description:Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Vulnerability:deluxebb
Published:2010-11-03
Severity:Medium
Description:SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.