INFORMATION SECURITY

Several years after beginning my work in information security I decided to “make it official” and get certified as a security professional.  In 2021 I studied the eight domains of cybersecurity established by the International Information System Security Certification Consortium ((ISC)2.   My passing of the Certified Information Systems Security Professional (CISSP) examination, along with my demonstrating security professional experience, allowed me to certify as a CISSP. 

— Certification —

Information security is a vast field, covering topics as mundane as padlocks and esoteric as post quantum cryptography.  You don’t have to be a CISSP to be a qualified security professional, however.  Showing interest and getting basic certification, such (ISC)2’s new Cybersecurity Certification or CompTIA’s Security+, is great way to jump start your path to being an experienced security professional.

If you’re reading this you are likely a lawyer, and are likely wondering why you would ever want an industry certification.   I once had a conversation with a renowned cybersecurity professional who was contemptuous of “cert-chasing”.  Well, he was one of those self-taught coders who had grown up with hacking in his blood, not a professional in a collateral field trying to gain breadth and perspective.  Certifications are the coin of the realm to demonstrate mastery of security concepts, and are here to stay. 

Many security clients are frustrated with lawyers who are an inch wide and mile deep in certain topics such as data breach notification, but would be deer in the headlights if you were to tell them Please Do Not Throw Sausage Pizza Away (LMGTFY).   As an Army lawyer I made it a point to gain infantry skills by shooting expert and getting Airborne and Air Assault wings.  If you really want to be a helpful adviser, learn the basics of what your clients are doing. Getting certified is a great first step. 

Take a look at ISC2.org for more insight.  And good hunting!