Security Compliance Work

Cyberscum

So, We were talking about the state of the IT Sec compliance field at work. The debate was; What is the best cert/education/knowledge combo for the IT compliance field. Interesting views to say the least.

Mine was CISSP/Masters/HIPPA

In your opinion what are the best certs/education/knowledge combination for the compliance field of IT security?

aftereffector

Compliance for which industry? HIPPA is great for healthcare but not so much for the DOD.

CISSP and Masters are a given, I think, and something like CISA or CAP could be worthwhile.

Cyberscum

aftereffector wrote: »

Compliance for which industry? HIPPA is great for healthcare but not so much for the DOD.

CISSP and Masters are a given, I think, and something like CISA or CAP could be worthwhile.

We were talking generally, We all work DoD and HIPPA is worthless in our environment. Let's say worldwide employability for simplicities sake

JoJoCal19

Obviously CISSP/Masters as a baseline. Then I'd say depending on your industry and the particulars of the job, CISM/CISA/CIPM/PCIP. I myself am waiting on a job offer for a GRC position that will be dealing heavily with scrutinizing legal contracts and negotiating information technology and information security terms and conditions, as well as handling internal and third party audits of the companies policies and procedures. In that role I'd say CISA and legal knowledge (which I have from my BS degree) will be helpful.