IT SECURITY PROFESSIONAL CERTIFICATIONS Federal Information Systems Security

IT SECURITY PROFESSIONAL CERTIFICATIONS: Federal Information Systems Security Educators Association MARCH 15, 2001 GAITHERSBURG, MD Lynn Mc. Nulty, CISSP, Panel Chair (Mc. Nulty & Associates) Gary Austin, CISA, CISSP (Guardent) Patricia Gilmore, CISSP (Atomic Tangerine) Robert Norris, Ph. D. (National Defense University)

PURPOSE n n n Discuss Current IT Security Related Professional Certification Programs (Note: Panel Members Do Not Represent All Available Certifications) Provide Some Perspective On Professional Certifications For IT Security Personnel Review Personal Versus Organizational Perspectives For Gaining Certification Address Issue Of “Government Only” Certifications Versus Global Certifications

QUESTIONS THAT SHOULD BE ASKED TO PANEL MEMBERS n n Does Certification Equal Value? Education Versus Practical Experience? Consistency Between Certifications? Benefits Of Certification n To The Organization? To The Individual? How Does Profession Certification Fit Into The Federal Personnel System?

CONCLUSION n n Information Security Is Becoming A Separate, Distinct Career Field Certification Should Be Viewed As Part Of A Process Of Personal Development And Education Version 1. 0 Of The “National Plan For Information Systems Protection” Cites An Acute Shortage Of Skilled IT Security Personnel In The Government. Is Certification A Measure Of Skill And Value? Professional Certification Is Becoming A Factor For IT Security Careerists