CH 14

Fundamentals of Information
Systems Security
Lesson 14
Information Security Professional
Certifications
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Learning Objective(s)
 Describe information systems security
educational opportunities and professional
certifications.

Fundamentals of Information Systems Security www.jblearning.com Page 2
Key Concepts
 U.S. DoD/Military Directive 8570.01 and DoDD
8140.01
 Popular vendor-neutral professional certifications
 Popular vendor-specific professional certifications

DoD Directive 8570.01
“Information Assurance Training,
Certification and Workforce Management”
Affects any DoD facility or contractor

organization
Ensures that all personnel who are directly

involved with information security possess
security certifications
DoD Directive 8140
 A new, operationally focused cybersecurity
training framework
 Will replace the 8570.01 directive
 Developed by the Defense Information Systems
Agency (DISA)

DoD Directive 8140 (cont.)
 Roles identified by the 8140 directive include:
• Security provision
• Operate and maintain
• Protect and defend
• Analyze
• Operate and collect
• Oversight and development
• Investigate

Joint Cyberspace Training and
Certification Standards

U.S. DoD/NSA Training Standards
Are actually training requirements for specific job

responsibilities
Developed by the CNSS and NSTISS committees
Provide guidance for course and professional

certification vendors to develop curriculum and
materials that meet DoD/NSA requirements

U.S. DoD/NSA Training Standards
Training Standard Description
NSTISS- National Training Standard for Information
4011 Systems Security (InfoSec) Professionals
CNSS-4012 National Information Assurance Training
Standard for Senior System Managers
Standard for System Administrators (SA)
CNSS-4014 Information Assurance Officer (IAO) Training
NSTISSC-4015 National Training Standard
for System Certifiers
Standard for Risk Analysts
Vendor-Neutral Professional
Certifications
A certification is an official statement that validates the fact that a
person has satisfied specific job requirements, including:
• Possessing a certain level of experience
• Completing a course of study
• Passing an examination
Certifications target specific areas of knowledge and expertise
Vendor-neutral certifications cover concepts and topics that are

general in nature

Seven Main (ISC)2 Certifications
SSCP
CCSP CISSP
HCISPP CAP
CCFP CSSLP
(cont.)
SSCP
• Covers the seven domains of best practices for information
security
CISSP
• Demonstrates competence in the eight domains of the (ISC)2
CISSP Common Body of Knowledge (CBK)
CAP
• Provides a method to measure the knowledge and skills of
professionals involved in authorizing and maintaining
information systems
(cont.)
CSSLP
• Evaluates professionals for the knowledge and skills
necessary to develop and deploy secure applications
CCFP
• Tests and evaluates professionals for the knowledge and
skills necessary to perform and conduct a digital forensics
investigation

(cont.)
HCISPP
skills necessary to perform and conduct security and privacy
work for health care organizations
CCSP
skills necessary to secure and manage cloud computing
environments

Additional (ISC)2 Professional
Certifications
Architecture (CISSP-ISSAP)
• Two years of professional experience in the area of
architecture; appropriate for chief security architects and
analysts
Engineering (CISSP-ISSEP)
• Road map for incorporating security into projects,
applications, business processes, and all information systems
Management (CISSP-ISSMP)
• Two years enterprise-wide security operations and
management; contains deeper managerial elements

Global Information Assurance
Certification (GIAC)/SANS Institute
Offers approximately 30 individual credentials
Spans several information security job disciplines:

• Audit
• Forensics
• Legal
• Management
• Security administration
• Software security
GIAC Credentials

Certified Internet Webmaster (CIW)
 Credentials focus on both general and web-
related security
 Credentials that satisfy CIW requirements
include:
• (ISC)2 SCCP or CISSP
• Various GIAC credentials
• CompTIA Security+
• Several vendor-specific credentials

CIW Credentials

CompTIA
 Security+
• Globally recognized
• Entry-level information security certification of
choice for IT professionals
• Meets the ISO 17024 standard and is
approved by the DoD 8570.01-M requirements
• Is industry supported
 CompTIA Advanced Security Practitioner
(CASP)
ISACA
 Is a nonprofit global organization that promotes
“the development, adoption, and use of globally
accepted, industry leading knowledge and
practices for information systems”
 Provides security training at conferences and
training events
 Offers four certifications for IT security
professionals: CISM, CISA, CGEIT, and CRISC

ISACA Certifications

Other Information Systems
Security Certifications
• CEH, CHFI, EC-Council Certified
EC-Council
Security Analyst, and more
Software Engineering • CERT—Certified Computer Security

Institute (Carnegie Incident Handler, SEI—Authorized
Mellon University CERT Instructor
Mile2 • Multiple security certifications
Certified Wireless • Multiple wireless security

Security Professional certifications

Other Information Systems
Security Certifications (cont.)
• Certified Computer Crime
High Tech Crime
Investigator, Certified Computer
Network
Forensic Technician
International Society of
• Certified Computer Examiner
Forensic Computer
(CCE)
Examiners
CyberSecurity Institute • CyberSecurity Forensic Analyst

(CSFA)
Offensive Security
• Multiple certifications

Vendor-Specific Professional
Certifications
 Certifications offered by vendors of
hardware and software products
 Holding a certification for a specific vendor
implies competence
 If an applicant meets requirements for a
certification, applicant has a certain level of
knowledge and skills

Cisco Systems
 One of the largest manufacturers of
network security devices and software
 Offers a range of certifications for its
networking products
 Offers several different certification levels
along different tracks that enable security
professionals to focus efforts on specific
knowledge and skills they need to get the
most out of Cisco equipment
Cisco Systems (cont.)
Levels Paths
Entry Design
Associate Security
Professional Voice
Expert Wireless
Architect Routing and Switching
Service Provider

Cisco
Certifications

Juniper Networks
 Manufactures a variety of network security
hardware and software
 Offers a varied range of certifications for its
networking product line
 Four levels from 11 different tracks
 Does not offer certifications at all levels for
every track

Juniper Networks Certification
Levels and Tracks

RSA
Global provider of security, risk, and
compliance solutions for enterprise
environments
Provides specific training and certifications to
help security professionals use RSA products
effectively
Offers certifications for RSA Archer and RSA
SecurID

Symantec
Provides a wide range of security software
products
Offers certifications for its product lines,

including:
• Administration of Symantec NetBackup for UNIX
• Administration of Symantec Enterprise Vault for
Exchange
• Administration of Symantec Endpoint Protection
• Administration of Symantec NetBackup for Windows

Check Point
 Global manufacturer of network and
security devices and software
 Provides training and certification paths for
security professionals to encourage highest
level of knowledge and skills in the use of
Check Point products
 Requires that applicants pass an exam that
involves 80 percent study materials and 20
percent hands-on experience
Check Point Certifications

Summary
 U.S. DoD/Military Directive 8570.01
and DoDD 8140.01
 Popular vendor-neutral professional
certifications
 Popular vendor-specific professional
certifications


CH 14

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CH 14

Uploaded by

Copyright:

Available Formats

Fundamentals of Information

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Affects any DoD facility or contractor

Ensures that all personnel who are directly

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Are actually training requirements for specific job

Developed by the CNSS and NSTISS committees

Provide guidance for course and professional

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Certifications target specific areas of knowledge and expertise

Vendor-neutral certifications cover concepts and topics that are

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Offers approximately 30 individual credentials

Spans several information security job disciplines:

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Software Engineering • CERT—Certified Computer Security

Mile2 • Multiple security certifications

Certified Wireless • Multiple wireless security

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

CyberSecurity Institute • CyberSecurity Forensic Analyst

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Architect Routing and Switching

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

Offers certifications for its product lines,

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company

You might also like