Like most things this year, (ISC)² Security Congress looks a little different. This year’s virtual event might not have you gathering with thousands of colleagues in Orlando, but you can still enjoy many of the fun activities we’ve offered over the years. Be sure to log into https://securitycongress.brighttalk.live/networking-engagement/ using your BrightTALK credentials. Escape Room A crowd pleaser at past Security Congress conferences, Living Security is back this year with their Virtual CyberEscape Room. Play online with colleagues in this team-based, engaging and FUN exercise. Sign your team up.  Panoply Another Security Congress classic is the Panoply competition. This network assessment / defense contest is ideal for all skill levels and lets you flex your cybersecurity skills, while honing new ones.

For the first time since (ISC)2 started tracking cybersecurity workforce numbers in 2004, we have seen a decrease in the skills gap, from 4.07 million in 2019 to 3.12 million. According to the 2020 (ISC)2 Cybersecurity Workforce Study, the workforce increased 25% from 2019 to a total of 3.5 million professionals worldwide. The numbers reflect an increase in new entrants to the field – 700,000 of them – but that doesn’t tell the whole story. Another contributing factor is an apparent reduction in demand as a result of the COVID-19 pandemic, which has had significant economic impacts around the world.  The pandemic has been the dominant story of 2020, and that is reflected in the findings of the Workforce Study.

One of the biggest draws to (ISC)² Security Congress is networking and engaging with other experts in the cybersecurity industry. Despite the lack of gathering together in-person, #ISC2Congress 2020 will not be lacking in the opportunities for connecting with others, learning best practices and providing career enhancement in five networking lounges throughout the conference. With more than 4,500 attendees registered, there is something for everyone at all career levels. Each of the five topic-specific lounges will allow attendees to participate in a discussion forum, access resources, view presentations, ask questions and even earn CPEs for attending. Attendees and Members Lounge While it is everyone’s first virtual (ISC)² Security Congress, if this is your first year as a member of (ISC)²

A corporate security policy is the cornerstone document of a company’s risk management. Does your business have the appropriate security controls in place to implement the policy, or is the policy a forgotten document in a dusty drawer? Although most companies have established security policies at the strategic level these are not always enforced, because they lack foundational support at the tactical level. The key to solving this is knowledgeable and skilled security practitioners who can take the lead and implement security controls aligned to the policy’s goals. Many security incidents may have been avoided if the proper security controls had been in place. As a result, affected businesses are running the operational risks of huge penalties by not being

The Certified Information Systems Security Professional (CISSP) certification is considered to be the gold standard in information security. This is so because of all the doors that certification opens to a CISSP professional. Those doors lead to many different types of positions and opportunities, thus making the information security community dynamic and multifaceted. In support of this, (ISC)2 has launched a series of interviews to explore where CISSP certification has led security professionals. Our first installment features Javvad Malik, a security awareness advocate at KnowBe4, as well as blogger and YouTuber at JavvadMalik.com. He’s also contributes on two podcasts,  The State Sponsored Podcast and Host Unknown, a company he founded. What job do you do today? I’m a security awareness