Shon Harris

Shon Harris Shon Harris was an American information security author, consultant, and instructor known for widely used certification study materials and training programs. She produced influential resources for professionals preparing for the Certified Information Systems Security Professional exam and contributed to cybersecurity pedagogy through partnerships with industry organizations and academic institutions. Her work intersected with leading standards, companies, and certification bodies across the information security and computer networking fields.

Early life and education

Born in 1968, Harris pursued studies that led her into computer science and information technology domains. She attended programs and institutions associated with applied electrical engineering and systems administration training, later augmenting her technical background with coursework linked to network security and information assurance. Her formative education connected her with communities around cryptography practice and software engineering development.

Career and publications

Harris authored the widely used Certified Information Systems Security Professional Study Guide, a resource aligned with the (ISC)² CISSP credential and referenced across information security curricula. She published multiple editions and titles that addressed domains covered by the NIST Special Publication frameworks, alongside materials addressing firewall configuration, intrusion detection methods, and access control models. Her books and manuals were adopted by training programs associated with organizations such as CompTIA, EC-Council, SANS Institute, Microsoft, and Cisco Systems. Publishers and distributors in the technical publishing ecosystem, including Wiley and allied retailers, circulated her study aids to audiences preparing for certifications like Security+, CISM, and CEH.

Teaching and industry contributions

As an instructor and consultant, Harris delivered training connected to enterprise practices at firms and agencies that used Windows Server platforms, Linux deployments, and Oracle infrastructures. She collaborated with corporate security teams at technology companies and worked with public-sector entities engaged in cybersecurity policy and operational readiness. Her teaching engaged with standards bodies and professional associations including ISACA, IEEE, and AFCEA, and intersected with conferences such as Black Hat, DEF CON, RSA Conference, and regional symposiums. Harris contributed to workforce development initiatives that linked vocational programs, community colleges, and university computer science departments with industry certification pathways.

Certifications and training materials

Harris both prepared candidates for and aligned content to certifications from bodies like (ISC)², CompTIA, ISACA (including CISM), and EC-Council (including CEH). Her study guides mapped to examination domains influenced by standards from NIST, ISO/IEC 27001, and sector-specific frameworks used by Department of Defense and Department of Homeland Security programs. Training curricula she developed incorporated practical labs referencing technologies from Cisco Systems routers and Juniper Networks devices to VMware virtualization, Amazon Web Services cloud components, and Microsoft Azure services. Vendor-neutral materials she authored were used alongside vendor courses by IBM, Hewlett-Packard, Dell Technologies, and security software vendors like Symantec, McAfee, and Palo Alto Networks.

Death and legacy

Harris died in 2014, leaving behind a body of instructional work that continued to influence certification preparation and cybersecurity education. Her study guides remained part of resource lists for candidates and were cited in syllabi at institutions partnering with organizations such as SANS Institute, Community College Cyber Summit, and university information assurance programs. Posthumously, her materials have been discussed in contexts alongside authors and educators like Darril Gibson, Eric Conrad, Cody Brocious, and publishers in the technical writing community. Her legacy persists in the training infrastructures used by corporations, government agencies, and professional associations focused on cybersecurity workforce development.

Category:American authors Category:Information security