Certifications

Certified Information Security Systems Professional (CISSP)

A CISSP is a person assigned by the government to audit your organization for HIPAA compliance. To qualify for this certification the candidate must have a minimum of four (4) years of direct full-time security professional work experience in one or more of ten domains of the information security Common Body of Knowledge (CBK), comply with a professional code of ethics, and pass a rigorous examination on the CBK of information security. CISSP certification indicates a mastery of an international standard for information security and understanding of a broad range of security issues and covers the entire arena of the information security profession such as:

• Access Control Systems and Methodology
• Applications and Systems Development
• Business Continuity and Disaster Recovery Planning
• Cryptography
• Law, Investigation, and Ethics
• Operations Security Physical Security
• Security Architecture and Models
• Security Management Practices
• Telecommunications and Network Security

Certified Information Security Manager (CISM)

A CISM is unique in the information security credential marketplace because it is designed specifically and exclusively for individuals who have experience managing an information security program. To achieve certification the candidate must submit evidence of a minimum of eight (8) years of professional IS audit experience. The CISM examination is based on the experience required to competently perform the duties and responsibilities of a senior level information security manager. The requirements are designed to measure an individual’s management experience in information security situations, not general practitioner skills. The CISM examination includes the following areas:

Information Security Governance

Establish and maintain a framework to provide assurance that information security strategies are aligned with business objectives and consistent with applicable laws and regulations.

Risk Management

Identify and manage information security risks to achieve business objectives.

Information Security Program Management

Design, develop and manage an information security program to implement the information security governance framework.

Information Security Management

Oversee and direct information security activities to execute the information security program.

Response Management

Develop and manage a capability to respond to and recover from disruptive and destructive information security events.

Certified Information Systems Auditor (CISA)

The mark of excellence for a professional certification program is the value and recognition it bestows on the individual who achieves it. Since 1978, the CISA program has been the globally accepted standard of achievement in the IS audit, control and security field. To achieve certification the candidate must submit evidence of a minimum of five (5) years of professional Auditing experience and successfully complete the CISA exam which covers such topics as:

• Management, Planning and Organization of Information Systems
• Technical Infrastructure and Operational Practices
• Protection of Information Assets
• Disaster Recovery and Business Continuity
• Business Application Systems Development, Acquisition, Implementation and Maintenance
• Business Process Evaluation and Risk Management
• The IS Audit Process

Certified HIPAA Security Specialist (CHSS)

A core aspect of the Health Insurance Portability and Accountability Act (HIPAA) is to appropriately secure electronic medical records. The CHSS must possess a thorough knowledge of the core elements defining the framework for meeting HIPAA’s security compliance requirements.

GIAC Security Leadership Certification (GSLC)

A GSLC has up-to-date knowledge and skills required to supervise the security component of any information technology project. Individuals who hold the GSLC have mastered the essential knowledge relating to current security issues, best practices, and technology.

Complete Certification Listing