Chartered Institute of Information Security

Chartered Institute of Information Security
Name	Chartered Institute of Information Security
Abbreviation	CIIS
Formation	21st century
Type	Professional body
Headquarters	London
Region served	International
Membership	Information security professionals
Leader title	President

Chartered Institute of Information Security The Chartered Institute of Information Security is a professional body for information security practitioners with links to major institutions across the United Kingdom and internationally. The institute engages with regulatory frameworks, standards-setting bodies and corporate, academic and public-sector stakeholders to promote standards of practice in cybersecurity, risk management and assurance. It collaborates with universities, certification authorities, industry consortia and governmental advisory panels to amplify professional competencies and research translation.

History

Founded in the early 21st century amid growing attention to cyber incidents and digital infrastructure resilience, the institute emerged alongside contemporaries such as National Cyber Security Centre (United Kingdom), ENISA, International Organization for Standardization, Institute of Electrical and Electronics Engineers, and British Standards Institution. Early initiatives intersected with events like the Stuxnet discovery and regulatory responses such as the Data Protection Act 1998 revisions and later amendments influenced by the General Data Protection Regulation. The institute developed relationships with academic centers including University of Oxford, University of Cambridge, Imperial College London, and University College London, and with corporate leaders like GCHQ, MI5, BT Group, Barclays, and BAE Systems. Over time it contributed to discussions alongside groups such as ISACA, (ISC)², SANS Institute, Open Web Application Security Project, and Centre for the Protection of National Infrastructure.

Mission and Objectives

The institute’s mission is aligned with standards promulgated by ISO/IEC JTC 1/SC 27 and policy frameworks associated with bodies like NIST and European Commission cybersecurity strategies. Objectives emphasize professional competence, ethical practice, and public assurance, engaging with legislative instruments such as the Cybersecurity Act (EU) and national frameworks influenced by cases considered by the Supreme Court of the United Kingdom and advisory committees including panels from Cabinet Office (United Kingdom). It seeks partnerships with philanthropic and research funders including the Wellcome Trust and Engineering and Physical Sciences Research Council.

Membership and Professional Certification

Membership tiers mirror structures used by organizations such as Royal Society, Chartered Institute of Personnel and Development, Chartered Institute of Management Accountants, and credentialing schemes like Certified Information Systems Security Professional from (ISC)² and Certified Information Security Manager from ISACA. The institute offers chartered status pathways comparable to designations conferred by Chartered Institute of Public Finance and Accountancy and recognition akin to fellowships awarded by Royal Academy of Engineering. It collaborates with higher education programs at institutions such as University of Edinburgh, University of Manchester, King's College London, and with certification providers such as CompTIA and EC-Council to validate curricula and continuing professional development.

Governance and Organization

Governance structures reflect models used by Chartered Institute of Taxation, Royal College of Physicians, and Chartered Institute of Personnel and Development with a council or board comprising elected fellows, lay trustees, and advisory members drawn from organizations including NATO Cooperative Cyber Defence Centre of Excellence, European Union Agency for Network and Information Security, Financial Conduct Authority, Ofcom, and corporate partners like Microsoft, Google, Amazon (company), and Cisco Systems. Executive leadership may include former officials associated with agencies such as GCHQ and experts previously affiliated with MI6 or academia at London School of Economics and University of Warwick.

Activities and Programs

Programs include professional development, accreditation, incident response exercises and public awareness campaigns, often partnering with initiatives such as Cyber Security Challenge UK, Cyber Essentials, Get Safe Online, and multinational exercises that involve stakeholders like World Economic Forum and Organisation for Economic Co-operation and Development. The institute hosts conferences, workshops and training that attract speakers from DEF CON, Black Hat (conference), RSA Conference, and speakers affiliated with research centers at Massachusetts Institute of Technology, Stanford University, and Carnegie Mellon University. It runs mentoring, scholarships and outreach with schools and colleges linked to programs at National Cybersecurity Academy and collaborates with professional liability insurers and standards bodies including BSI Group.

Research and Publications

Publishing peer-reviewed and practitioner-oriented outputs, the institute produces white papers, guidance and frameworks that reference standards from ISO/IEC, risk taxonomies used by NIST, and policy analyses influenced by reports from House of Commons (United Kingdom) committees and international bodies like the United Nations Office on Drugs and Crime. Research partnerships include collaborations with universities such as Oxford Internet Institute, University of Cambridge Computer Laboratory, University of Bristol, University of Glasgow, and think tanks including Chatham House, Royal United Services Institute, and RAND Corporation. Publications address topics intersecting with landmark incidents involving Equifax data breach, Yahoo data breaches, NotPetya, and regulatory responses such as enforcement actions by Information Commissioner's Office. The institute disseminates journals, practice guides, and policy briefs to inform practitioners, regulators and corporate boards including those at HSBC, Citigroup, and Deutsche Bank.

Category:Professional associations in the United Kingdom