Maintaining the Relevancy of (ISC)² Certifications: CISSP and SSCP Credential Enhancements

During our history 26 years (Y) ² has earned a reputation of providing the security credentials of the gold standard information. The relevance of these credentials amid changes in technology and evolving threats that occur in this industry is a central strategy in which this organization was built.

As a result of a rigorous methodical process (ISC) ² steps to regularly update their views on diplomas, I am pleased to report that improvements will be made to both the professional Certified System Security (CISSP) and Certified Safety systems Practitioner (SSCP ) credentials, from 15 April 2015. We carry out this process on a regular basis to ensure that controls and subsequent training and continuing professional education requirements cover areas relevant to the roles and responsibilities of professional security professionals information today.

The two powers reflect the knowledge of information security best practices, but in different facets. SSCP are generally more involved in the technical practical work, day to day operating safety. SSCP basic skills include implementation, monitoring and management of IT infrastructure in accordance with safety procedures of political information and requirements that ensure data confidentiality, integrity and availability. CISSP equally technically competent, overall design, engineer, implement and manage the security program of the company in general.

SSCPs and CISSPs speak the same information security language with unique perspectives that complement each other across various IT departments and business lines.

The content of the agent (ISC) ² SSCP CBK has been updated to reflect the most important issues that security professionals face today, as well as best practices to mitigate these problems. The result is a test that more accurately reflects the skill of the art practice and security needed for daily professional work functions forefront of information security today.

The domain names have been updated as follows to describe the topics accurately:

SSCP Domains, Effective April 15, 2015

  1. Access Controls
  2. Security Operations and Administration
  3. Risk Identification, Monitoring, and Analysis
  4. Incident Response and Recovery
  5. Cryptography
  6. Networks and Communications Security
  7. Systems and Application Security

renewed technical content was added to the agent (ISC) ² CISSP CBK to reflect the most current issues in the industry of information security today. Some issues have been developed (eg, active safety, evaluation and safety testing), while other subjects were readjusted under different domains. The result is a test that more accurately reflects the technical competence and necessary management of a professional information security experience to design effective, engineer, implement and manage the program information security organization in a security landscape constantly changing.