Chapter 11, Problem 14RQ

Explanation of Solution

List of certification credentials to InfoSec practitioners:

The certifications available to InfoSec practitioners include:

• CISSP
• SSCP
• GIAC
• Security+
• CISA
• CISM
• CCE

CISSP (Certified Information Systems Security Professional):

• It is the most prestigious certification for security managers and CISOs.
• It is offered by ISC2 (International Information System Security Certification Consortium)
• The CISSP exam focuses on the following 10 domains: access control systems and methodology, applications and systems development, law and investigation and ethics, operations security, physical security, security architecture and models, security management practices, business continuity planning, cryptography and telecommunications, network, and Internet security.

SSCP (Systems Security Certified Practitioner):

• ISC2 also offers the SSCP (Systems Security Certified Practitioner), which focuses on the following areas: access controls, administration, auditing and monitoring, risk, response, and recovery, cryptography, data communications, and malicious code/malware. ?

GIAC (Global Information Assurance Certification):

• The GIAC (Global Information Assurance Certification) series of certifications are offered by SANS Institute; they test for knowledge and require candidates to demonstrate application of that knowledge...