Unlike accounting, audit, law, engineering or medicine professions, to practice in the field of security you are not required to demonstrate…

← Back to Blog

Unlike accounting, audit, law, engineering or medicine professions, to practice in the field of security you are not required to demonstrate membership of a professional institution.

You can be the head of cyber for a $multi-billion business and have no professional recognition, nor is it required. You can write and develop cybersecurity risk regulation and have no previous practical knowledge of the cyber or risk management. Recognition the some peers are required to demonstrate. Yet you cannot write accounting, audit, legal or medical standards or regulations without demonstrating practical and professional standing for example.

Professional recognition demonstrates independent peer reviewed assurance of an individuals knowledge and experience. Demonstrating professionals have met a standard required by professions such as medical, legal, audit and engineering.

There are no internationally agreed Professional standards that security professionals can aspire, to demonstrate competence and Continued Professional Development.

Security professionals do not need professional membership to operate. But given the increasing threat security poses, they should? Cyber regulation is front and center in the U.S and EU. Requiring covered companies demonstrate oversight, assurance and attestation of cybersecurity risk management, at risk of civil or criminal penalties. How do peers of the security industry such as lawyers, accountants, auditors, doctors, auditors or engineers assure the professionalism of security professionals?

The The Worshipful Company of Security Professionals is a professional body in the UK. Along with the The Security Institute it provides professional oversight, assurance and attestation of security professionals. Amongst other things requiring security professionals to demonstrate their Continued Professional Development through the Chartered Security Professional (CSyP) program. That one is an assessor for.

One requirement to maintain the CSyP Post Nominals is demonstrating Continued Professional Development (CPD).

Ted Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagement #professionaldevelopment #cpd

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7151487353264467968