In Depth

The Security Certification Directory

Brief descriptions and links to professional certifications in information security, physical security, audit, investigations, business continuity and more.

Page 2

AUDIT CERTIFICATIONS

Certified Information Systems Auditor (CISA)
Issuing Org.: Institute of Internal Auditors
Description: "Awarded by the Information Systems Audit and Control Association to those individuals with an interest in information systems auditing, control, and security who have met and continue to meet specific requirements."
Requirements:
-Successfully complete the CISA Examination
-Adhere to the Information Systems Audit and Control Association's Code of Professional Ethics
-Submit evidence of a minimum of five (5) years of professional information systems (IS) auditing, control or security work experience. Substitution and waivers of such experience applies
-Adhere to a continuing education program."
More information: www.isaca.org

Certified Information Security Manager (CISM)
Issuing Org.: Institute of Internal Auditors
Description: "Awarded by the Information Systems Audit and Control Association& a new certification and is specifically geared toward experienced information security professionals. CISM is business-oriented and focused on information risk management while addressing management, design and technical security issues at the conceptual level. It is for the individual who must maintain a view of the big picture by managing, designing, overseeing and assessing an enterprise's information security."
Requirements:
-Successfully complete the CISM Examination
-Adhere to the Information Systems Audit and Control Association's Code of Professional Ethics
-Submit verified evidence of a minimum of five (5) years of information security work experience, with a minimum of three (3) years of information security management work experience in three or more the CISM job practice areas
More information: www.isaca.org

Certification in Control Self-Assessment (CCSA)
Issuing Org.: Institute of Internal Auditors
Description: "The Certification in Control Self-Assessment (CCSA) is The Institute of Internal Auditors first specialty certification and second certification to be offered by the Board of Regents in the history of the Institute of Internal Auditors. The new CCSA certification program will identify the skill sets needed by successful CSA practitioners, measure proficiency in CSA, and provide guidance for CSA initiatives."
Requirements: Experience plus a certification exam.
More information: www.theiia.org

Certified Internal Auditor (CIA)
Issuing Org.: Institute of Internal Auditors
Description: "The Institute of Internal Auditors (IIA) offers Certified Internal Auditor (CIA) certification which requires candidates to master their ability to identify risks, examine alternative remedies, and prescribe the best initiatives to control these risks. CIAs master auditing standards and practices as well as management principles and controls, information technology, and emerging strategies to improve business and government. CIAs learn the best ways to manage business. The CIA exam tests a candidate's knowledge and ability regarding the current practice of internal auditing. It enables candidates and prospective managers to adapt to professional changes and challenges by:
-Addressing nearly all management skills.
-Focusing on the principles of management control.
-Measuring a candidate's understanding of risk management and internal controls."
Requirements:
More information: www.theiia.org

Certification in Control Self-Assessment (CCSA)
Issuing Org.: Institute of Internal Auditors
Description: "Gaining the required knowledge of areas such as risk and control models—often considered the realm of auditors only—exposes CSA practitioners from all backgrounds to concepts that are vital in effectively using CSA to help clients achieve their objectives."
Requirements: "Candidates must complete 54 CPD (continuing professional development) hours in the following manner: 18 CPD hours for Introduction to Control Self-Assessment; 18 CPD hours for either Value-Added Business Controls: The Right Way to Manage Risk or Evaluating Internal Controls: A COSO-Based Approach; and 18 CPD hours for either Assessing Risk: A Better Way to Audit or CSA Facilitation Techniques for Auditors." More information: