Chapter 14: Information Security Professional Certifications

1. © 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Fundamentals of Information
Systems Security
Lesson 14
Information Security Professional
Certifications

2. Page 2Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 2Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Learning Objective(s)
 Describe information systems security
educational opportunities and professional
certifications.

3. Page 3Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 3Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Key Concepts
 U.S. DoD/Military Directive 8570.01 and DoDD
8140.01
 Popular vendor-neutral professional certifications
 Popular vendor-specific professional certifications

4. Page 4Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 4Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
DoD Directive 8570.01
“Information Assurance Training,
Certification and Workforce Management”
Affects any DoD facility or contractor
organization
Ensures that all personnel who are directly
involved with information security possess
security certifications

5. Page 5Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 5Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
DoD Directive 8140
 A new, operationally focused cybersecurity
training framework
 Will replace the 8570.01 directive
 Developed by the Defense Information Systems
Agency (DISA)

6. Page 6Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 6Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
DoD Directive 8140 (cont.)
 Roles identified by the 8140 directive include:
• Security provision
• Operate and maintain
• Protect and defend
• Analyze
• Operate and collect
• Oversight and development
• Investigate

7. Page 7Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 7Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Joint Cyberspace Training and
Certification Standards

8. Page 8Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 8Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
U.S. DoD/NSA Training Standards
Are actually training requirements for specific job
responsibilities
Developed by the CNSS and NSTISS committees
Provide guidance for course and professional
certification vendors to develop curriculum and
materials that meet DoD/NSA requirements

9. Page 9Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 9Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
U.S. DoD/NSA Training Standards
Training Standard Description
NSTISS-
4011
National Training Standard for Information
Systems Security (InfoSec) Professionals
CNSS-4012 National Information Assurance Training
Standard for Senior System Managers
CNSS-4013 National Information Assurance Training
Standard for System Administrators (SA)
CNSS-4014 Information Assurance Officer (IAO) Training
NSTISSC-4015 National Training Standard
for System Certifiers
CNSS-4016 National Information Assurance Training
Standard for Risk Analysts

10. Page 10Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 10Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Vendor-Neutral Professional
Certifications
A certification is an official statement that validates the fact that a
person has satisfied specific job requirements, including:
• Possessing a certain level of experience
• Completing a course of study
• Passing an examination
Certifications target specific areas of knowledge and expertise
Vendor-neutral certifications cover concepts and topics that are
general in nature

11. Page 11Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 11Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Seven Main (ISC)2 Certifications
SSCP
CISSP
CAP
CSSLPCCFP
HCISPP
CCSP

12. Page 12Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 12Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Seven Main (ISC)2 Certifications
(cont.)
SSCP
• Covers the seven domains of best practices for information
security
CISSP
• Demonstrates competence in the eight domains of the (ISC)2
CISSP Common Body of Knowledge (CBK)
CAP
• Provides a method to measure the knowledge and skills of
professionals involved in authorizing and maintaining
information systems

13. Page 13Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 13Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Seven Main (ISC)2 Certifications
(cont.)
CSSLP
• Evaluates professionals for the knowledge and skills
necessary to develop and deploy secure applications
CCFP
• Tests and evaluates professionals for the knowledge and
skills necessary to perform and conduct a digital forensics
investigation

14. Page 14Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 14Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Seven Main (ISC)2 Certifications
(cont.)
HCISPP
• Tests and evaluates professionals for the knowledge and
skills necessary to perform and conduct security and privacy
work for health care organizations
CCSP
• Tests and evaluates professionals for the knowledge and
skills necessary to secure and manage cloud computing
environments

15. Page 15Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 15Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Additional (ISC)2 Professional
Certifications
Architecture (CISSP-ISSAP)
• Two years of professional experience in the area of
architecture; appropriate for chief security architects and
analysts
Engineering (CISSP-ISSEP)
• Road map for incorporating security into projects,
applications, business processes, and all information systems
Management (CISSP-ISSMP)
• Two years enterprise-wide security operations and
management; contains deeper managerial elements

16. Page 16Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 16Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Global Information Assurance
Certification (GIAC)/SANS Institute
Offers approximately 30 individual credentials
Spans several information security job disciplines:
• Audit
• Forensics
• Legal
• Management
• Security administration
• Software security

17. Page 17Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 17Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
GIAC Credentials

18. Page 18Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 18Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Certified Internet Webmaster (CIW)
Credentials focus on both general and web-
related security
Credentials that satisfy CIW requirements
include:
• (ISC)2 SCCP or CISSP
• Various GIAC credentials
• CompTIA Security+
• Several vendor-specific credentials

19. Page 19Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 19Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
CIW Credentials

20. Page 20Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 20Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
CompTIA
Security+
• Globally recognized
• Entry-level information security certification of
choice for IT professionals
• Meets the ISO 17024 standard and is
approved by the DoD 8570.01-M requirements
• Is industry supported
CompTIA Advanced Security Practitioner
(CASP)

21. Page 21Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 21Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
ISACA
 Is a nonprofit global organization that promotes
“the development, adoption, and use of globally
accepted, industry leading knowledge and
practices for information systems”
 Provides security training at conferences and
training events
 Offers four certifications for IT security
professionals: CISM, CISA, CGEIT, and CRISC

22. Page 22Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 22Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
ISACA Certifications

23. Page 23Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 23Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Other Information Systems
Security Certifications
• CEH, CHFI, EC-Council Certified
Security Analyst, and more
EC-Council
• CERT—Certified Computer Security
Incident Handler, SEI—Authorized
CERT Instructor
Software Engineering
Institute (Carnegie
Mellon University
• Multiple security certificationsMile2
• Multiple wireless security
certifications
Certified Wireless
Security Professional

24. Page 24Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 24Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Other Information Systems
Security Certifications (cont.)
• Certified Computer Crime
Investigator, Certified Computer
Forensic Technician
High Tech Crime
Network
• Certified Computer Examiner
(CCE)
International Society of
Forensic Computer
Examiners
• CyberSecurity Forensic Analyst
(CSFA)
CyberSecurity Institute
• Multiple certifications
Offensive Security

25. Page 25Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 25Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Vendor-Specific Professional
Certifications
Certifications offered by vendors of
hardware and software products
Holding a certification for a specific vendor
implies competence
If an applicant meets requirements for a
certification, applicant has a certain level of
knowledge and skills

26. Page 26Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 26Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Cisco Systems
One of the largest manufacturers of
network security devices and software
Offers a range of certifications for its
networking products
Offers several different certification levels
along different tracks that enable security
professionals to focus efforts on specific
knowledge and skills they need to get the
most out of Cisco equipment

27. Page 27Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 27Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Cisco Systems (cont.)
Levels
Entry
Associate
Professional
Expert
Architect
Paths
Design
Security
Voice
Wireless
Routing and Switching
Service Provider

28. Page 28Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 28Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Cisco
Certifications

29. Page 29Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 29Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Juniper Networks
Manufactures a variety of network security
hardware and software
Offers a varied range of certifications for its
networking product line
Four levels from 11 different tracks
Does not offer certifications at all levels for
every track

30. Page 30Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 30Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Juniper Networks Certification
Levels and Tracks

31. Page 31Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 31Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
RSA
Global provider of security, risk, and
compliance solutions for enterprise
environments
Provides specific training and certifications to
help security professionals use RSA products
effectively
Offers certifications for RSA Archer and RSA
SecurID

32. Page 32Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 32Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Symantec
Provides a wide range of security software
products
Offers certifications for its product lines,
including:
• Administration of Symantec NetBackup for UNIX
• Administration of Symantec Enterprise Vault for
Exchange
• Administration of Symantec Endpoint Protection
• Administration of Symantec NetBackup for Windows

33. Page 33Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 33Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Check Point
Global manufacturer of network and
security devices and software
Provides training and certification paths for
security professionals to encourage highest
level of knowledge and skills in the use of
Check Point products
Requires that applicants pass an exam that
involves 80 percent study materials and 20
percent hands-on experience

34. Page 34Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 34Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Check Point Certifications

35. Page 35Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Page 35Fundamentals of Information Systems Security
© 2018 Jones and Bartlett Learning, LLC, an Ascend Learning Company
www.jblearning.com
All rights reserved.
Summary
U.S. DoD/Military Directive 8570.01
and DoDD 8140.01
Popular vendor-neutral professional
certifications
Popular vendor-specific professional
certifications