Certifications

SecuRisk Solutions today announced the release of their new podcast series entitled SharkTalk™ wherein cutting edge information security topics and issues are discussed with renowned authors, speakers, technologists, executives, contributors and pragmatists in the information security arena.

You can subscribe to these podcasts via iTunes or RSS.

For more information, please visit - Shark Talk with Mano Paul

Many major news carriers found it important to carry the news today that “Obama orders a 60-day cybersecurity review”. Some stated that “Cybersecurity is now one of the major national security problems facing the United States”, while in reality, it is actually a major INTERNATIONAL security problem facing the ENTIRE GLOBE (not just the United States). Other references were made to th need for the White House to

1. initiate a drive to develop next-generation secure computers and networking for national security applications; 
2. establish tough new standards for cyber security and physical resilience; 
3. battle corporate cyber espionage and 
4. target criminal activity on the Internet.

All of these are absolutely important and critical issues that cannot be ignored, but one major issue missing in these is the PEOPLE component of cybersecurity. As my whitepapers have repeatedly eluded to, People are the FIRST line of DEFENSE; technical security controls are rendered futile by people who are not aware of how to protect their own computing ecosystem.

I was  privileged to be in the audience of the Commission on Cybersecurity for the 44th Presidency on the day  (December 29), their report was released for public viewing, where the panelists - Rep. Jim Langevin (D. R.I), Rep. Michael McCaul (R. TX), Lt. General Harry D. Raduege Jr. USAF, retd.) Deloitte & Touche and Marcus Sachs, Verizon Comunications participated.

Highlights from the panel I captured are given below.

1. Cybersecurity is today’s greatest security threat.
2. There is a need for increased awareness among the American people.
3. Threats are real today in the virtual world.
4. Espionage and Digital Pearl Harbor is very likely.
5. Cyberspace is an national asset and needs apropriate protection not just for national security but also for economic security without compromise on privacy and civil liberties.
6. There is a need for buy-in from the International community as well as cyberspace does not end at the waters edge.
7. Partnerships with the private sector as well is extemely important and has been proven to be useful in past situations.
8. There is a need for a cyber mindset - safe and protected use of the cyberspace.
9. There is a need for education and awareness - across the nation and internationally.

“It is Imperative as a nation that cybersecurity is taken into account seriously for the liveability of the nation. If not we have failed as a nation.” 

From the press release it seems to be like President Obama is taken cybersecurity into account seriously. Only time will tell of the liveability of this nation and the world. It’s about time that cybersecurity was in the forefront.

(ISC)2 announced the release of a brand new certification, entitled the Certified Secure Software Lifecycle Professional (CSSLP), to address educating and certifying people on various aspects of software security.

Covering topics from Secure Software Concepts to Secure Deployment and Operations, weaving through Requirements, Design, Development, Testing and Acceptance, this certification is a welcome addition to the already existing gold standard certifications that (ISC)2 administers such as the CISSP, SSCP, CAP, CISSP-MP/AP/EP.

More information about CSSLP can be found at https://www.isc2.org/csslp
A whitepaper on the Need for Secure Software can be found at https://www.isc2.org/download/CSSLP-white-paper.pdf

Excerpt from the official press release ( Jan 29, 2008 )

(ISC)²® (”ISC-squared”), the non-profit global leader in educating and certifying information security professionals throughout their careers, today announced the launch of a new online self-assessment tool known as studISCope (pronounced “study scope”). The tool aims to enable security staffs and individuals to assess their knowledge of the (ISC)² CBK®, a taxonomy of information security topics that serves as the foundation for all (ISC)² certifications.

“studISCope is beneficial to both certification candidates and employers,” said Eddie Zeitler, CISSP, executive director of
(ISC)². “It helps candidates focus their study efforts more precisely and enhances their comfort level prior to sitting for the official certification exam.”

For more information, read the entire press release at https://www.isc2.org/PressReleaseDetails.aspx?id=1316
For more information about studISCope and current promotions go to https://www.isc2.org/studISCope

(ISC)² is dedicated to creating new value-added services for its prospective and more than 65,000 current members worldwide. One of the most exciting of these is studISCope, our online self-assessment tool that helps candidates assess their knowledge of the CISSP or SSCP CBK^®. Together with our partner, Express Certifications – a company renowned for developing innovative testing and training techniques – (ISC)² can now maximize your learning experience and focus your study efforts more precisely along whichever information security career path you choose.

Read More