Getting an Isecp Certification

The Information Security Engineering Certified Professional (ISECP) certification is a vendor-neutral information security certification developed for IT specialists dealing with security tasks, professionals whose training in information security has been achieved through self-study and on-the-job experience, or those looking for an information security career. A vendor-neutral means it is not tied to one computer or network brand of platform.

The examination topics include:

1. Information Security Administration (basics of information security administration, data classification, information security control types, incident and disaster recovery)

2. Computing Systems Security (basics of computing systems security, workstations security, handheld devices security, servers security, operating systems security)

3. Communication Systems Security (basics of communication security, wired networks security, wireless networks security, virtual private networks, network security protocols and remote access, firewalls, attacks to data networks and appropriate defenses, data networks availability and disaster recovery, digital voice communication security)

4. Applications and Databases Security (basics of applications and databases security,
application design practices and errors, threats to application security, DBMS models and common DBMS security)

5. Cryptography (simple ciphers, symmetric stream and block ciphers, public key ciphers and digital signature schemes, hash algorithms, cryptographic protocols, hybrid cryptosystems, cryptanalysis)

6. Access Control (basics of access control, access types and methods, access control techniques, multilevel security models, knowledge-based identification & authentication, biometrics-based identification & authentication, single sign-on identification & authentication, token based identification & authentication, other identification and authorization systems intrusion prevention, threats and detection)

ISECP examination is free, available in English only, and is presented as a proctored, real time, closed book, computer based exam delivered in a 60 minutes time frame, with 40 multiple-choice questions. Candidates sitting the exam need a score of 70 (out of 100) in order to pass the exam. Exam results are displayed as soon as the candidate completes the exam.

While preparing for the ISECP exam the candidate get to know the best information security practices worldwide and possess a solid foundation of experience and education in information security.

The purpose of the ISECP exam is to enable candidates have a general view on information security and not be trapped in understanding security from one point of view only.