Security Certification
Roadmap
April 2022

Certified Information Security Manager (CISM)

The CISM certification is for IT professionals with five years of experience in infosec, such as information security managers, potential managers, or IT security consultants with the knowledge to create and maintain an enterprise information security (infosec) program. ‎

Risk and Information Systems Control (CRISC) Certified

CRURSC is designed for technicians with at least three years of enterprise-level information security program management experience, such as business analysts, CIOs, CISOs, project managers, and other IT professionals. They must have experience working in risk management, control, compliance and assurance activities. Certification holders can expertly assess IT risks and design information systems controls.

Certified Information Systems Auditor (CISA)

The CISA exam validates the expertise of technicians who oversee IT and business systems. Certificate holders know how to stop fraud and non-compliance, analyze audit findings, and report to the affected organization. While hard to earn, CISA is a good choice for technicians looking to improve their inspection and security skills. ‎

Entry-Level Certificate Options

1. GIAC Information Security Fundamentals (GISF)

GIAC Information Security Fundamentals (GISF) is designed for those who are new to information security and want to enter the field. It covers the basic concepts of information security, including risks, information, and the best ways to protect data.

2. GIAC Penetration Tester (GPEN)

GPEN is a vendor-independent designation that prepares you to conduct effective penetration testing. Verifies an IT professional's skills to perform penetration testing by following best practices. GPEN winners can confidently scout, exploit and take a process-oriented approach to penetration testing projects. GPEN is designed for ethical hackers, penetration testers, forensic experts, and other IT security professionals.

Attacker Security Certified Professional (OSCP)

The Offensive Security Certified Professional (OSCP) is an ethical hacking certification and a gateway certification for penetration testing. OSCP is a good certification option for those working -ERR:REF-NOT-FOUND-in IT security, such as network administrators and penetration testers, security consultants, cybersecurity engineers, cybersecurity analysts, and other security professionals. An ideal candidate for this certification will have a thorough understanding of networking and TCP/IP. They will also be familiar with Linux, Bash scripting, and Python or Perl.

High-Level Cybersecurity Certifications

1. CompTIA Advanced Security Enforcer (CASP+)

CASP+ is the only performance-based certification designed for advanced cybersecurity technicians, not managers. It is unique in that it encompasses security architecture and engineering – not just one or the other. CASP+ is the only designation that enables technical leaders to assess cyber readiness within an organization and to design and implement solutions that enable an organization to be prepared for future attacks.

2. Certified Information Systems Security Specialist (CISSP)

According to Global Knowledge, the (ISC)2 Certified Information Systems Security Specialist (CISSP) certification is one of the most followed and highest-paying cybersecurity certifications. The certificate gives $147,885* per year. Candidates for the CISSP exam need at least five years of paid work experience as a security analyst. Applicants with a bachelor's degree in computer science can cut one year of the job requirement. If your goal is set to become a chief information security officer (CISO), security manager, or security architect, a CISSP may be the best cybersecurity certification for you.

3. GIAC Security Specialist (GSE)

The GIAC Security Expert (GSE) is also considered one of the best cybersecurity certifications for 2022, but this high-level certification is among the hardest to earn. There are several prerequisite certifications required for the GSE exam, including GSEC, GCIA and GCIH – all offered by the GIAC/SANS Institute. GSE winners prove to have the highest level of expertise in many different areas of the cybersecurity discipline, including writing, applied technical work, research, collaborative work, and solo presentation.

Arif Akyüz
Information Technologies Specialist