EDUCAUSE | Security Certification

Security Certifications in Higher Education

Rodney — Tue, 27 Nov 2007 14:22:03 -0600

The Security Task Force has created a resource page that provides information about security certifications, including links to known security certifications (under the heading of "Community Resources"). Please contact us if we are missing any known security certifications.

According to the 2006 security survey conducted by the EDUCAUSE Center for Applied Research (Safeguarding the Tower: IT Security in Higher Education), the following information is available regarding security certifications by IT security staff at colleges and universities:

18% of the respondents indicated that the person in charge of IT security holds one IT security certificate
3% of those in charge of IT security hold two certificates
3% of those in charge of IT security hold three certificates

Of the individuals who have certification, the following information available:

15.3% hold the Certified Information Systems Security Professional (CISSP) certificate;
5.5% hold the Certified Information Security Manager (CISM) certificate;
5.2% hold the Global Information Assurance Certification (GIAC);
2.4% hold the Certified Information Systems Auditor (CISA) certificate; and
14.9% hold other security certifications

The Security Task Force Awareness and Training Working Group is continuing to promote security training for IT staff and evaluate the role of security certifications in establishing credentials that advance the IT security profession in higher education. Your comments and suggestions are welcome.

Tune In Nov. 14: Free Web Seminar on IT Security Essential Body of Knowledge for Workforce Development

vvogel — Thu, 08 Nov 2007 16:15:57 -0600

The Department of Homeland Security's National Cyber Security Division worked with subject matter experts from government, the private sector, and academia to develop an umbrella framework that establishes a national baseline representing the essential knowledge and skills IT security practitioners must have to perform their jobs. The IT Security EBK builds directly on established work and is not intended to represent a standard, directive, or policy by DHS. Instead, it further clarifies key IT security terms and concepts for well-defined competencies, identifies notional security roles, and defines primary functional perspectives to help advance the IT security training and certification landscape as we strive to ensure that we have the most qualified and appropriately trained IT security workforce possible.

This free November 14 EDUCAUSE Live! Web seminar, IT Security Essential Body of Knowledge: A Competency and Functional Framework for IT Security Workforce Development, features presenter Brenda Oldfield, Director of Education, Training, and Workforce Development, Office of Cyber Security and Communications, U.S. Department of Homeland Security.

Those unable to attend may wish to visit the archives after the event or browse related EDUCAUSE resources:

Tune In Nov. 14: Free Web Seminar on IT Security Essential Body of Knowledge for Workforce Development

cluckett — Wed, 07 Nov 2007 17:18:53 -0600

This free November 14 EDUCAUSE Live! Web seminar, IT Security Essential Body of Knowledge: A Competency and Functional Framework for IT Security Workforce Development, features presenter Brenda Oldfield, director of education, training, and workforce development, office of cyber security and communications, U.S. Department of Homeland Security,

Those unable to attend may wish to visit the archives after the event or browse related EDUCAUSE resources:

IT Security Essential Body of Knowledge: Federal Register Notice Request for Comments

Rodney — Tue, 09 Oct 2007 11:20:50 -0500

A Federal Register Notice has been published for the Department of Homeland Security's "Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development." The deadline for comments is December 7, 2007.

According to the Notice:

The EBK is not an additional set of DHS guidelines, and it is not intended to represent a standard, directive, or policy by DHS. Instead, it further clarifies key IT security terms and concepts for well-defined competencies, identifies notional security roles, defines four primary functional perspectives, and establishes an IT Security Role, Competency, and Functional Matrix.

More information, including a downloadable version of the IT Security EBK, is available at http://www.us-cert.gov/ITSecurityEBK/

There will be a briefing for the higher education sector with Brenda Oldfield from DHS as part of an EDUCAUSE Live on November 14, 2007, at 1 p.m.