In Depth

The Security Certification Directory

Brief descriptions and links to professional certifications in information security, physical security, audit, investigations, business continuity and more.

Page 3

PHYSICAL SECURITY AND LOSS PREVENTION CERTIFICATIONS

Cert: Certified Protection Professional (CPP)
Issuing Org: ASIS International
Description: "As the emphasis on protecting people, property, and information increases, it has strengthened the demand for professional managers&. Nearly 10,000 professionals have earned the designation of CPP. This group of professionals has demonstrated its competency in the areas of security solutions and best-business."
Requirements:
- Education: Bachelor's degree or higher from an accredited institution, and seven years of security experience, including at least three years in responsible charge of a security function
OR
- Work Experience: Nine years of security experience, including at least three years in responsible charge of a security function.
- All applicants must pass CPP examination
- Also requires no prior conviction of significant criminal offense
More information: ASIS International

Name: Physical Security Professional (PSP)
Issuing Org.: ASIS International
Description: "The physical security examination is targeted to security professionals whose primary responsibility is to conduct threat surveys; design integrated security systems that include equipment, procedures, and people; or install, operate, and maintain those systems."
Requirements:
Experience and Education
1. Five years of experience in the physical security field
2. High school diploma or GED
3. The applicant must not have been convicted of significant criminal
Must adhere to PSP Code of Professional Responsibility.
More information: ASIS International

Cert: Loss Prevention Qualified (LPQ)
Issuing Org:Loss Prevention Foundation
Description:"Designed to be a benchmark education for entry level loss prevention associates."
Requirements:Coursework and exam
More information: http://www.losspreventioncertification.com/INDX-LearnMore.htm

Cert: Loss Prevention Certified (LPC)
Issuing Org:Loss Prevention Foundation
Description:"Designed as advanced education for loss prevention management and executives who hope to further their career in the loss prevention field." Available Spring 2009.
Requirements:Online coursework and proctored exam
More information: http://www.losspreventioncertification.com/INDX-LearnMore.htm

FRAUD, INVESTIGATION AND FORENSICS CERTIFICATIONS

Certified Fraud Examiner (CFE)
Issuing Org.: Association of Certified Fraud Examiners
Description: "Since 1988, the Association has been dedicated to educating and certifying qualified individuals (Certified Fraud Examiners) in the highly specialized aspects of fraud detection and prevention. The diverse membership of the Association includes auditors, accountants, fraud investigators, loss prevention specialists, attorneys, educators, criminologists, and other anti-fraud professionals.
The Certified Fraud Examiner program is an accrediting process for individuals with the specialized skills to detect, investigate, and deter fraud. Certified Fraud Examiners have the expertise to resolve allegations of fraud from inception to disposition, gather evidence, take statements, write reports, testify to findings, and assist in the prevention and detection of fraud."
Requirements: "Before applying to become a CFE, candidates must first become Associate Members of the Association of Certified Fraud Examiners. Further requirements include the equivalent of a bachelors degree from a recognized institution of higher learning, two years of professional experience related directly or indirectly to the detection and deterrence of fraud, and successful completion of the Uniform CFE Examination. "
More information: www.cfenet.com

CERT-Certified Computer Security Incident Handler
Issuing Org.: Software Engineering Institute (SEI)
Description: "SEI CERT provides certification and training programs to support the needs of DoD 8570 and provide military, civilian, and contract personnel who handle information assurance for DoD systems with the appropriate certification and training needed for the job they perform. The SEI's CERT Virtual Training Environment provides on-line courses that support several certification programs, as well as development of core IA skills. " Requirements: "SEI-Certified Computer Security Incident Handlers
- are knowledgeable and skilled in the latest practices in the cyber security field
- have completed an industry leading qualification track
- commit to a professional code of conduct that separates them from all other practitioners in the field
- ensure that the organization stays current on recent innovations and research in the computer security field."
More information: sei.cmu.edu

Certified Identity Theft Risk Management Specialist (CITRMS)
Issuing Org.: Institute of Consumer Financial Education
Description: "The Certified Identity Theft Risk Management Specialist (CITRMS) certification program is the nations only training program specifically developed for professionals who are dedicated to educating and assisting clients, customers, businesses, and the general public in combating the epidemic of Identity Theft and related fraud. CITRMS-qualified professionals are employed by a wide range of organizations including financial institutions; mortgage, real estate, and financial services firms; law enforcement, and other government agencies. Many others are private practitioners including attorneys, CPAs, financial advisors, counselors, and consultants."
More information: www.icfe.org

Professional Certified Investigator (PCI)
Topic: Investigations
Issuing Org.: ASIS International
Description:. The PCI certification will help employers identify those professionals who have the specific, in-depth competency and knowledge required not only to get the job done - but to get it done right. Examination consists of multiple-choice questions covering tasks, knowledge, and skills in case management, evidence collection, and case presentation
Requirements:
- Experience and Education
1. Five years' investigations experience, with at least two in case management.
2. A high school diploma or GED equivalent.
3. Adherance to PCI Code of Professional Responsibility
More information: ASIS International

Computer Hacking Forensic Investigator Certification (CHFI)
Issuing Org.: EC Council
Description: "Computer hacking forensic investigation is the process of detecting hacking attacks and properly extracting evidence to report the crime and conduct audits to prevent future attacks. Computer forensics is simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence. Evidence might be sought in a wide range of computer crime or misuse, including but not limited to theft of trade secrets, theft of or destruction of intellectual property, and fraud. CHFI investigators can draw on an array of methods for discovering data that resides in a computer system, or recovering deleted, encrypted, or damaged file information." Requirements: More information: www.eccouncil.org">

PRIVACY CERTIFICATIONS

Certified Information Privacy Professional (CIPP)
Issuing Org.: International Association of Privacy Professionals, IAPP
Description: "The Certified Information Privacy Professional (CIPP) debuted in 2004 and has since become the industry-standard certification in corporate compliance with U.S. privacy laws and regulations as well as European requirements for transfers of personal data.
Requirements: Successful candidates have become IAPP members and also have completed and passed the Certification Foundation Examination and the CIPP Examination.
More information: IAPP