SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

</head>

ISC2

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .infobox-subbox{padding:0;border:none;margin:-3px;width:auto;min-width:100%;font-size:100%;clear:none;float:none;background-color:transparent}.mw-parser-output .infobox-3cols-child{margin:auto}.mw-parser-output .infobox .navbar{font-size:100%}@media screen{html.skin-theme-clientpref-night .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media(min-width:640px){body.skin--responsive .mw-parser-output .infobox-table{display:table!important}body.skin--responsive .mw-parser-output .infobox-table>caption{display:table-caption!important}body.skin--responsive .mw-parser-output .infobox-table>tbody{display:table-row-group}body.skin--responsive .mw-parser-output .infobox-table th,body.skin--responsive .mw-parser-output .infobox-table td{padding-left:inherit;padding-right:inherit}}

/* end https://en.wikipedia.org/ */

</style><table class="infobox vcard"><caption class="infobox-title fn org">International Information System Security Certification Consortium, Inc.</caption><tbody><tr><td colspan="2" class="infobox-image logo"><div class="infobox-caption">ISC2 logo</div></td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Abbreviation</th><td class="infobox-data nickname">ISC2</td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Formation</th><td class="infobox-data note">1989</td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Type</th><td class="infobox-data"><a href="501(c)(6)_organization" class="mw-redirect" title="501(c)(6) organization">501(c)(6) organization</a></td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Purpose</th><td class="infobox-data">Cybersecurity professional association</td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Headquarters</th><td class="infobox-data"><a href="Alexandria%2C_Virginia" title="Alexandria, Virginia">Alexandria, Virginia</a>, U.S.</td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Membership</th><td class="infobox-data">635,000+</td></tr><tr><th scope="row" class="infobox-label" style="padding-right:0.6em;">Website</th><td class="infobox-data"><a rel="nofollow" class="external text" href="https://www.isc2.org">www.isc2.org</a></td></tr></tbody></table>

International Information System Security Certification Consortium, or ISC2, is a non-profit organization which specializes in training and certifications for <a href="Cybersecurity" class="mw-redirect" title="Cybersecurity">cybersecurity</a> professionals. It has been described as the “world's largest IT security organization”.<a href="#cite_note-1">[1]</a>

<div class="mw-heading mw-heading2"><h2 id="History">History</h2></div>

In the mid-1980s, a need for a standardized, vendor-neutral certification program for information security professionals was identified. In November 1988, the Data Processing Management Association's Special Interest Group for Computer Security (SIG-CS) brought together several organizations to form a consortium to address this need. This led to the formation of ISC2 in mid-1989 as a non-profit organization.

The first working committee to establish a Common Body of Knowledge (CBK) was formed in 1990, and the first version of the CBK was finalized in 1992. This work laid the foundation for the organization's first certification, the <a href="Certified_Information_Systems_Security_Professional" title="Certified Information Systems Security Professional">Certified Information Systems Security Professional</a> (CISSP), which was launched in 1994.<a href="#cite_note-2">[2]</a>

The organization continued to expand its certification offerings over the years:

<ul><li>The <a href="Systems_Security_Certified_Practitioner" class="mw-redirect" title="Systems Security Certified Practitioner">Systems Security Certified Practitioner</a> (SSCP) was introduced in 2001.</li>

<li>The Certified in Governance, Risk and Compliance (CGRC) was launched in 2023.<a href="#cite_note-3">[3]</a></li>

<li>The Certified Secure Software Lifecycle Professional (CSSLP) was introduced in 2008.<a href="#cite_note-4">[4]</a></li>

<li>The Certified Cloud Security Professional (CCSP), co-developed with the <a href="Cloud_Security_Alliance" title="Cloud Security Alliance">Cloud Security Alliance</a>, was launched in 2015.<a href="#cite_note-5">[5]</a></li></ul>

ISC2 also expanded its global presence, opening a regional office for Europe, the Middle East, and Africa (EMEA) in London in 2001, and an Asia-Pacific office in Hong Kong in 2002.<a href="#cite_note-6">[6]</a> The first ISC2 Security Congress conference was held in 2011, the same year its charitable arm, the ISC2 Foundation (now the Center for Cyber Safety and Education), was launched.

In 2022, ISC2 announced a major initiative to address the cybersecurity workforce gap, including the “One Million Certified in Cybersecurity” program, which provides free entry-level Certified in Cybersecurity (CC) certification education and exams.<a href="#cite_note-7">[7]</a> In 2023, the organization underwent a rebrand, changing its preferred abbreviation from (ISC)2 to ISC2.<a href="#cite_note-8">[8]</a>

<div class="mw-heading mw-heading2"><h2 id="Certifications">Certifications</h2></div>

ISC2 offers a range of certifications aimed at different levels of experience and specializations within the information security field.

<div class="mw-heading mw-heading3"><h3 id="Foundational">Foundational</h3></div>

<ul><li>Certified in Cybersecurity (CC): An entry-level certification for individuals seeking to start a career in cybersecurity. It requires no prior work experience and covers foundational security principles, business continuity, access controls, network security, and security operations.<a href="#cite_note-9">[9]</a></li></ul>

<div class="mw-heading mw-heading3"><h3 id="Professional">Professional</h3></div>

<ul><li><a href="Certified_Information_Systems_Security_Professional" title="Certified Information Systems Security Professional">Certified Information Systems Security Professional</a> (CISSP): A globally recognized standard for experienced security professionals. It is aimed at security managers and leaders and requires at least five years of cumulative, paid work experience in two or more of the eight CBK domains, which include Security and Risk Management, Asset Security, and Security Architecture and Engineering.<a href="#cite_note-10">[10]</a> It has several concentrations:

<ul><li>CISSP-ISSAP (Information Systems Security Architecture Professional)<a href="#cite_note-11">[11]</a></li>

<li>CISSP-ISSEP (Information Systems Security Engineering Professional)<a href="#cite_note-12">[12]</a></li>

<li>CISSP-ISSMP (Information Systems Security Management Professional)<a href="#cite_note-13">[13]</a></li></ul></li></ul>

<ul><li><a href="Systems_Security_Certified_Practitioner" class="mw-redirect" title="Systems Security Certified Practitioner">Systems Security Certified Practitioner</a> (SSCP): For IT administrators, network security engineers, and security analysts with hands-on technical security responsibilities. It requires at least one year of cumulative, paid work experience in one or more of the seven CBK domains, such as Access Controls, Security Operations and Administration, and Cryptography.<a href="#cite_note-14">[14]</a></li></ul>

<ul><li>Certified Cloud Security Professional (CCSP): A certification focused on cloud security, designed for professionals in IT, cybersecurity, and cloud architecture. It requires at least five years of cumulative IT experience, including three years in information security and one year in one of the six CCSP domains, which cover cloud concepts, data security, platform security, and legal risk.<a href="#cite_note-15">[15]</a></li></ul>

<ul><li>Certified in Governance, Risk and Compliance (CGRC): Formerly the Certified Authorization Professional (CAP), this certification is for personnel involved in authorizing and maintaining information systems within the <a href="Risk_Management_Framework" title="Risk Management Framework">Risk Management Framework</a> (RMF). It is targeted at professionals responsible for formalizing processes to assess risk and establish security documentation. It requires at least two years of cumulative, paid work experience in one or more of the seven domains of the CGRC CBK.<a href="#cite_note-16">[16]</a></li></ul>

<ul><li>Certified Secure Software Lifecycle Professional (CSSLP): A certification focused on application security and secure software development. It is intended for software developers, engineers, and architects. It requires a minimum of four years of cumulative, paid work experience in one or more of the eight domains of the CSSLP CBK, such as Secure Software Concepts, Requirements, and Testing.<a href="#cite_note-17">[17]</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Governance">Governance</h2></div>

ISC2 is governed by a Board of Directors, which is composed of 13 members elected by the ISC2 membership. The Board provides strategic direction and oversight for the organization. Elections are held annually to fill open seats, and members vote to select from a slate of qualified candidates. The Board is led by a Chairperson, who is elected by the directors to preside over meetings and guide the Board's activities. The day-to-day operations of the organization are managed by a Chief Executive Officer (CEO), who is appointed by and reports to the Board of Directors.<a href="#cite_note-18">[18]</a>

The organization's structure and procedures are defined in its official Bylaws. All ISC2 members, associates, and candidates must adhere to the ISC2 Code of Ethics. The code mandates that individuals act honorably, honestly, justly, responsibly, and legally. It serves as a framework for professional conduct, and violations can lead to an investigation and potential sanctions, including the revocation of certifications.

<div class="mw-heading mw-heading2"><h2 id="Advocacy_and_Research">Advocacy and Research</h2></div>

ISC2 is involved in advocacy efforts and regularly publishes research on the state of the cybersecurity workforce. Key publications include:

<ul><li>ISC2 Cybersecurity Workforce Study: An annual report that analyzes the size of the workforce gap, trends in the profession, and challenges faced by practitioners.<a href="#cite_note-19">[19]</a></li>

<li>ISC2 Security Congress: An annual conference for security professionals.<a href="#cite_note-20">[20]</a></li></ul>

The organization actively engages with governments and policymakers to shape cybersecurity-related laws, regulations, and frameworks globally, with specific advocacy efforts in the United States, United Kingdom, Canada, and the European Union. It partners with government agencies, such as the U.S. Department of Defense, to align its certifications with governmental workforce requirements like the DoD 8140 Directive.<a href="#cite_note-21">[21]</a>

Through its Global Academic Program, ISC2 partners with universities and colleges to integrate professional certifications into academic curricula, providing institutions with research support and curriculum development resources to prepare students for cybersecurity careers.<a href="#cite_note-22">[22]</a> Its charitable arm, the Center for Cyber Safety and Education, focuses on public outreach and educational programs to improve cyber safety for the general public.

<ul><li><a href="List_of_computer_security_certifications" title="List of computer security certifications">List of computer security certifications</a></li>

<li><a href="SANS_Institute" title="SANS Institute">SANS Institute</a></li>

<li><a href="ISACA" title="ISACA">ISACA</a></li>

<li><a href="CompTIA" title="CompTIA">CompTIA</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/Insights/2024/11/why-cissp-is-the-gold-standard">"Why is the CISSP Considered the Gold Standard in Cybersecurity?"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-2"><a href="#cite_ref-2">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/Insights/2024/02/Celebrating-30-Years-of-CISSP">"Celebrating 30 Years of CISSP"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-3"><a href="#cite_ref-3">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/Insights/2023/02/CAP-is-Now-Certified-in-Governance-Risk-and-Compliance">"CAP is Now Certified in Governance, Risk and Compliance (CGRC)"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-4"><a href="#cite_ref-4">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.techtarget.com/searchsecurity/definition/CSSLP-certified-secure-software-lifecycle-professional">"What is CSSLP (Certified Secure Software Lifecycle Professional)? | Definition from TechTarget"</a>. Search Security. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-5"><a href="#cite_ref-5">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.techtarget.com/searchsecurity/definition/Certified-Cloud-Security-Professional-CCSP">"What is Certified Cloud Security Professional (CCSP)? | Definition from TechTarget"</a>. Search Security. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-6"><a href="#cite_ref-6">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/contact-us">"Contact Us | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-7"><a href="#cite_ref-7">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/Insights/2024/03/ISC2-Continues-Investment-in-One-Million-Certified-in-Cybersecurity-Pledge">"ISC2 Continues Investment in One Million Certified in Cybersecurity Pledge with New AI-Based Training"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-8"><a href="#cite_ref-8">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/Insights/2023/08/cybersecurity-is-evolving-so-are-we">"Cybersecurity Is Evolving. So Are We"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-9"><a href="#cite_ref-9">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/cc">"CC Certified in Cybersecurity Certification | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-10"><a href="#cite_ref-10">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/cissp">"CISSP Certified Information Systems Security Professional | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-11"><a href="#cite_ref-11">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/issap">"ISSAP Information Systems Security Architecture | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-12"><a href="#cite_ref-12">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/issep">"ISSEP Systems Security Engineering Certification | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-13"><a href="#cite_ref-13">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/issmp">"ISSMP Information Systems Security Management | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-14"><a href="#cite_ref-14">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/sscp">"SSCP Systems Security Certified Practitioner Certification | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-15"><a href="#cite_ref-15">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/ccsp">"CCSP Certified Cloud Security Professional | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-16"><a href="#cite_ref-16">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/cgrc">"CGRC Governance, Risk & Compliance Certification | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-17"><a href="#cite_ref-17">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/certifications/csslp">"CSSLP Certified Secure Software Lifecycle Professional | ISC2"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-18"><a href="#cite_ref-18">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/about/governance">"ISC2 Govarnance and Bylaws"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-19"><a href="#cite_ref-19">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/research">"Cybersecurity Workforce Study"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-20"><a href="#cite_ref-20">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/professional-development/events">"ISC2 Events"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-21"><a href="#cite_ref-21">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/Insights/2025/01/certifications-key-to-unlocking-dod-8140-compliance">"Certifications Key to Unlocking DoD8140 Compliance"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

<li id="cite_note-22"><a href="#cite_ref-22">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.isc2.org/landing/global-academic-program">"Global Academic Program"</a>. www.isc2.org. Retrieved June 12, 2025.</cite>

</li>

</ol></div></div>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li><a rel="nofollow" class="external text" href="https://www.isc2.org/">Official website</a> </li></ul></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-07-29" href="https://en.wikipedia.org/wiki/?title=ISC2&oldid=1303137061">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>