(ISC)²

(ISC)²
ISC2, Inc. · CC BY-SA 4.0 · source
Name	(ISC)²
Founded	1989
Headquarters	Clearwater, Florida
Type	Professional association
Focus	Information security certification, Cybersecurity

(ISC)² is an international nonprofit organization specializing in information security and cybersecurity certifications, professional development, and advocacy. It administers widely recognized credentials for practitioners in fields associated with Information security, Computer security, Network security, Cloud computing, and Risk management. The organization interacts with a broad set of stakeholders including technology vendors, academic institutions, standards bodies, and public sector agencies.

History

Founded in 1989 amid rising concerns about Computer crime and the growth of Internet adoption, the organization emerged alongside professional groups such as SANS Institute, ISACA, and Computer Security Institute. Early activities paralleled developments in legislation like the Computer Fraud and Abuse Act and standards initiatives such as ISO/IEC 27001. Over time the group expanded its reach during events including the proliferation of Windows NT, the aftermath of the Melissa and ILOVEYOU incidents, and the emergence of threats like Stuxnet and WannaCry. Its evolution paralleled the growth of enterprises such as Microsoft, IBM, Cisco Systems, and Amazon that influenced enterprise security practices. Major milestones coincided with collaborations with academic institutions like Massachusetts Institute of Technology, Stanford University, and Carnegie Mellon University as well as international relations with entities such as the European Union, NATO, and the United Nations.

Certifications

The organization is best known for credential programs used by practitioners and employers worldwide. Flagship certifications include credentials for roles found at firms like Google, Apple Inc., Facebook, Oracle Corporation, and Dell Technologies. Candidate pathways align with topics covered by standards and frameworks such as NIST Cybersecurity Framework, ISO/IEC 27002, and COBIT. Holders often work on technologies from vendors including Palo Alto Networks, Fortinet, Juniper Networks, and Check Point Software Technologies. Certifications are leveraged in hiring at institutions like JPMorgan Chase, Goldman Sachs, Bank of America, ExxonMobil, and Boeing. The credential portfolio has been expanded to reflect roles related to Cloudflare, VMware, Salesforce, and Oracle Cloud deployments, and to disciplines intersecting with Artificial intelligence research at OpenAI, DeepMind, and IBM Research.

Governance and Organization

The body operates as a nonprofit corporation with structures comparable to professional associations such as IEEE, ACM, and American Bar Association. Governance includes boards, committees, and regional chapters modeled after organizations like Project Management Institute and American Institute of Certified Planners. Executive leadership often engages with public policy actors from U.S. Department of Homeland Security, National Institute of Standards and Technology, and international regulators in United Kingdom, Australia, and Canada. Partnerships and alliances involve technology consortia such as Internet Engineering Task Force, World Wide Web Consortium, and standards groups including ISO and ITU.

Professional Activities and Education

Activities include continuing professional education, conferences, and training comparable to offerings from Black Hat (conference), DEF CON, and RSA Conference. The organization publishes guidance and resources that overlap with materials from SANS Institute, Center for Internet Security, and Cybersecurity and Infrastructure Security Agency. Educational outreach extends to university programs at University of Oxford, University of Cambridge, National University of Singapore, and vocational collaborations with entities like Coursera, edX, and Udacity. It administers exams and learning credits recognized alongside credentials from CompTIA, Cisco Certified Network Associate, and Microsoft Certified: Azure Security Engineer Associate.

Global Impact and Advocacy

The organization engages in advocacy and capacity building across regions including Africa, Asia, Europe, and Latin America through partnerships with multilateral organizations like the World Bank, International Monetary Fund, and World Health Organization. It supports workforce initiatives similar to programs run by UNESCO, INTERPOL, and Interpol. Its global chapters and volunteer networks work with national bodies such as National Cyber Security Centre (UK), Australian Cyber Security Centre, and Canadian Centre for Cyber Security to promote professional standards and resilience in sectors including finance, healthcare, and critical infrastructure represented by companies like Siemens, General Electric, and Schneider Electric.

Controversies and Criticism

Critiques have arisen over exam administration logistics, parallels drawn with disputes faced by organizations like Pearson VUE and Prometric regarding test center operations. Debates include credential maintenance fees, continuing education requirements, and the comparability of certifications to academic degrees offered by institutions such as Harvard University, Yale University, and Princeton University. Legal and policy tensions have surfaced in contexts similar to controversies involving Cambridge Analytica and platform governance by Twitter and Facebook, especially in discourse about professional ethics, privacy, and the limits of accreditation. Discussions continue among stakeholders including corporations like Accenture, Deloitte, KPMG, and PwC about practitioner competency, hiring practices, and the role of third-party certification bodies in shaping industry norms.

Category:Information security organizations