Earlier in the year, we announced an upcoming update to the CISSP-ISSAP certification exam. Coming in November, the CISSP-ISSEP exam will also be updated. The CISSP-ISSEP is a concentration certification exam for those who already hold the CISSP. The concentration recognizes certification for those who have the keen ability to practically apply systems engineering principles and processes to develop secure systems. Those who hold it have the knowledge and skills to incorporate security into projects, applications, business processes and information systems. When the updated exam blueprint takes effect starting on November 13, 2020, the CISSP-ISSEP exam will be reduced from 150 to 125 questions, though the test time of three hours will remain the same. This aligns the exam with

By AJ Yawn, CISSP Amazon Web Services (AWS) is the industry-leading cloud service provider by any metric you can find doing a quick google search. The shared responsibility model is generally understood by individuals managing production workloads that are hosted on AWS and *most* auditors understand how this impacts a SOC 2 or other compliance assessment (if your auditor asks you about the physical security of an AWS data center, close your laptop, leave the conference room and run away really fast!). AWS has developed several services and features to help manage the security of an organizations’ AWS account and resources. These services, whenused effectively, can reduce evidence requirements, reduce or eliminate the risk of auditor findings, and most importantly

Hundreds of thousands of people have been asked to work for home with little information as to when things will be back to normal. Likewise, children are having to stay at home to avoid the spread of Coronavirus disease 2019 (COVID-19). Parents around the world are in the hunt for resources that can entertain and educate their children without breaking the bank or having to go outside. To help with this burden, the nonprofit Center for Cyber Safety and Education is offering, until the end of April, free access to its Garfield eLearning program. Children ages 6-12 will be able to access all three online lessons (Privacy, Safe Posting and Cyberbullying) during this period at no charge. These fun and

ISC)² continues to grow as it recently surpassed a milestone of 150,000 certified cybersecurity professionals in 175 countries. This is good news considering the data in the 2019 (ISC)2 Cybersecurity Workforce Study indicates that the cybersecurity workforce needs hire 4.07 million professionals globally to close the skills gap to better defend organizations. “We’re extremely proud of our association’s growth over the past 30 years to support the profession and reach this member milestone,” said David Shearer, CEO, (ISC)². “However, we can’t stop now. The cybersecurity workforce still needs to grow by 145% globally in order to close the widening skills gap, and we will continue to maintain our certifications and provide up-to-date training opportunities to help our members keep their

There are just a few weeks left to submit your session to speak at this year’s Security Congress. The 10th annual conference will be held November 16 – 18, 2020 at the Hyatt Regency Orlando in Orlando, Florida. If you’ve never spoken at Security Congress - or any conference – before, you may not be sure where to start when it comes to your speaker submission. We’ve compiled five tips to help you write a great speaker submission and increase your chances of being selected! No pitches! We don’t accept any marketing or product pitch type of submissions. It’s ok if you have a preference for a particular tool or program that you want to share, but that can’t be