Click here to receive your FREE subscription to Campus Technology
4/1/2007
1:: Look to other industries. A 2005 CSO magazine survey, weighted to corporate responses, found that 63 percent of CISOs have an information security background, 35 percent come from corporate security, and 32 percent are from the military.
2:: Consider peer advice. Louisiana State University’s Brian Voss, CIO, and Brian Nichols, chief IT security and policy officer, will discuss the role of the CISO in a session entitled “Introducing: The New CISO on Campus,” at Campus Technology 2007, July 30- Aug. 2, in Washington, DC.
Tammy Clark, information security officer at Georgia State University, also presented a number of useful tips in her 2004 Educause conference presentation, "How Do You Create a Successful Information Security Program? Hire a Great ISO!"
3:: KYCA: Know Your Certification Acronyms. There are a number of certifications available. For example, the Information Systems Security Certification Consortium offers the Certified Information Systems Security Professional (CISSP) and Systems Security Certified Practitioner (SSCP) certifications. However, the widely used CISSP certification is based on a broad understanding of security principles and does not measure in-depth technical knowledge.
In addition, individual vendors such as Cisco Systems and Internet Security Systems offer more technically based certifications for their products.
Some other common certifications include Certified Information Security Manager (CISM) and Certified Information Systems Auditor (CISA) from the Information Systems Audit and Control Association; Global Information Assurance Certification; and Certified Protection Professional (CPP) from ASIS International.
Caveat: Certifications are only a crude measure of qualification and do not substitute for good personnel and hiring