Are you responsible for hiring members of the cybersecurity team at your organization? Then we want to hear from you! (ISC)² is looking to meet with professionals who hire cybersecurity practitioners, specifically entry level staff. We are holding a two-day virtual meeting for this purpose which is scheduled for September 27-28, 2021. It will run from 8:30 a.m. to 4:30 p.m. (EST). If you’re interested and available for those two days, please send an email that includes your position and organization you work for to letstalk@isc2.org no later than September 15, 2021. The number of available seats is limited. Respondents will be selected on first-come-first-serve basis. Selected participants must sign a Non-Disclosure Agreement (NDA). No (ISC)² certifications are required to share

(ISC)² CEO Clar Rosso recently joined Megan Gavin, director of global events, for a webinar as part of the series Inside (ISC)². The two executives candidly discussed the 2021 (ISC)² Security Congress, taking place October 18-20, as well as the future of all (ISC)² global events. Megan shared that while Security Congress is changing from hybrid to virtual, the agenda, content, number of sessions and speakers will not be impacted, and the shift provides an opportunity for us to provide another world-class virtual conference. “As much as we’re disappointed that we will not see you in person, we are dedicated to building upon our 2020 successes to make this year’s virtual conference even better,” Megan promised. Improvements include increased virtual

No matter where you are in your cybersecurity career journey – a college graduate looking for your first professional role, an experienced staff member aiming to step into leadership, or a veteran manager wanting to expand your expertise – (ISC)² cybersecurity certifications can help you achieve your goals. With nine certifications to choose from (including our three CISSP concentrations), it may be difficult to know which qualification is right for you. The CISSP is the most well-known (ISC)² certification, with roughly 150,000 card-carrying members around the world, but that doesn’t mean it’s best for everyone. How to Know if CISSP is the Best (ISC)² Certification for You Using the new (ISC)² qualification pathfinder, you answer a few questions about your

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) announced this week that they have observed an “increase in highly impactful ransomware attacks occurring on holidays and weekends.” The REvil ransomware gang knocked JBS Foods’ operations offline over the U.S. Memorial Day weekend. REvil struck again over the U.S. Fourth of July holiday weekend, launching a ransomware attack targeting Kaseya, which had a cascading effect on Kaseya’s managed service provider customers and their clients. It’s not coincidental that these attacks transpired over holiday weekends. Attackers know that it’s difficult for security teams to quickly respond to an incident when away from work, giving them more time to move laterally and lock up or steal data.

Cloud security tops the list of technical concepts and systems those seeking a career in cybersecurity should pursue, according to the 2021 Cybersecurity Career Pursuers Study. The research also points to the benefits of upskilling current IT teams to become cybersecurity experts in the face of the worldwide skills shortage. Clearly, cloud security certification is a smart move for enterprises and individuals. But with so many credentials out there, how can you determine which one is right for you? Let’s look at two options: Certified Cloud Security Professional (CCSP) vs. Certificate of Cloud Auditing Knowledge (CCAK). Certification vs. Certificate: What are the distinctions? CCSP is a certification; CCAK is a certificate. A certification recognizes a candidate’s knowledge, skills, and abilities,