In a world fraught with personal and corporate financial insecurity, the need for skilled and knowledgeable business professionals has never been greater. Compliance with local and international laws and industry regulations have raised the bar for professional business practices expected of organizations, which have in turn increased the need for professionals who know how to help organizations fulfill and document compliance with the new laws and regulations. Establishing and maintaining a solid risk-based approach to managing information security, business continuity/disaster recovery, and fraud control is no longer simply a good thing for organizations to do. Today, regulators demand it.
Your experience in the field is an important component of your value to an employer. But experience isn’t enough. Employers need something quantifiable and verifiable to show them you have the expertise they need. Certification by a respected accreditation organization is becoming indispensable to the business professional.
Positions in many large corporations and governmental agencies worldwide now require certification, and credentialed practitioners have a higher earning potential and greatly expanded career opportunities.Moreover, being certified makes a statement about who you are. You’ll be recognized as a knowledgeable, serious, dedicated professional – part of a globally recognized family of business professionals. For over 10 years, Certified Information Security has trained business professionals to:
With the proper training and certification by Certified Information Security, you can illustrate to employers your documented and proven expertise to fulfil new and urgent needs in each of these three critical areas.
Accreditation of Certifications
The International Risk Management Certification Board (IRMCB) is an independent Non-Governmental Organization accreditation authority that exists to lead and enhance the effective practice of enterprise risk management in conformance with recognized frameworks and standards of best practice such as ISO 31000 and COSO. The scope of IRMCB extends to related integrated risk management systems including:
Certified Information Security is an Authorized Training and Education Center (ATEC) for the International Risk Management Certification Board (IRMCB). CIS certifications are NOT certified and accredited to ISO standard 17024.
Being a member of CIS says a lot about who you are, which is, after all, a consummate professional in a world fraught with security threats, including fraud incidents and other business disruptions. Certification gives you the backing, the education, the colleagues, the networking system, and the power to face these threats head on.
With CIS certification, you’ll be part of a globally recognized family of information professionals. You’ll have access to our full spectrum of global resources, inside informational activities, private forums and peer networking, mentoring and sponsoring, research and teaching, and a wealth of ongoing information security, fraud control, and business continuity management opportunities at your fingertips.
Do you have experience in information security, fraud control, or business continuity management, but wonder where you stand with regard to the CIS certification process or which CIS credential is right for you? Simply go to our online certification catalog to determine which certification best suits your interests and experience.
Receiving your CIS credential is a several-step process:
Maintaining your membership requires the following:
If you are not already an Associate Member of the CIS body of certified professionals, you must first become a member to pursue a CIS credential. As a member, you will be entitled to such member benefits as:
Register to become an associate member now:
Initial membership applications are subject to an application fee of $20.00 USD, plus normal membership dues of $80.00 if approved. Memberships are then renewed annually in January for $80.00 USD. When joining AFTER 30 September of the current year, you will automatically receive membership through 31 December of the following year.
All professionals who are certified by Certified Information Security (CIS) recognize that such certification is a privilege that must be both earned and maintained. In support of this principle, all CIS members are required to commit to fully support this Code of Ethics (the "Code"). CIS members who intentionally or knowingly violate any provision of the Code will be subject to action by a peer review panel, which may result in the revocation of certification. CIS members are obligated to follow the ethics complaint procedure upon observing any action by a CIS member that breach the Code. Failure to do so may be considered a breach of the Code pursuant to Canon IV, "Advance and Protect the Profession".
There are only four mandatory canons in the Code. By necessity, such high-level guidance is not intended to be a substitute for the ethical judgment of the professional.
Additional guidance is provided for each of the canons. While this guidance may be considered by the board of directors in judging behavior, it is advisory rather than mandatory. It is intended to help professionals identify and resolve the inevitable ethical dilemmas that they will confront during the course of their information security career.
Code of Ethics Preamble:
Code of Ethics Canons:
The following additional guidance is given regarding pursuit of these goals.
Objectives for Guidance
These objectives are provided for information only; the professional is not required or expected to agree with them. In resolving the choices that confront him or her, the professional should keep in mind that the following guidance is advisory only. Compliance with the guidance is neither necessary nor sufficient for ethical conduct. Compliance with the preamble and canons is mandatory. Conflicts between the canons should be resolved in the order of the canons. The canons are not equal and conflicts between them are not intended to create ethical binds.
Protect society, the commonwealth, and the infrastructure
Act honorably, honestly, justly, responsibly, and legally
Annual Maintenance Fees and Continuing Educational Credit Requirements
Payment of Annual Maintenance Fees (AMFs) and maintaining your membership in the CIS Body of Certified Professionals (CISBCP) ensures that the organization has the necessary financial resources to maintain member records, ensures certification continues to meet the needs and requirements of the market, and ensures that the organization will continue to be a functional, dynamic entity far into the future. Although you are not required to post or record CPEs, CPEs must be made available upon demand should you be selected for random audit.
For any certifications starting after 30 September of the current year, AMF requirements shall be waived for the first subsequent year.
The CPE categories will provide the number of credits you can earn for each activity. Typically, you will earn one CPE credit per one-hour time spent in an educational activity. You can self-record CPEs in 0.25, 0.50 and 0.75 increments. However, some activities are worth more credits due to the depth of study or amount of ongoing commitment involved. In general, CPE credits are not earned for normal on-the-job activities.
If the CPE activity occurred over multiple days, the end date is used to determine eligibility for a particular certification cycle. For example, if the activity started 1 August 2018 and ended on 5 September 2019, the CPE can be applied to any cycle that was active on 5 September 2019.
Auditing of CPE Credits
CIS' CPE Auditors perform random audits of claimed CPE credits by members/associates. Members will need to provide proof of attendance or a brief description of the activity. This is an important process which upholds the integrity of CIS’ credentials as well as keeping in compliance with ANSI/ISO standards for certification.
If you are chosen for an audit, you will receive instructions via email regarding the necessary documentation to support these activities. It is important to respond to this request and to provide the information exactly as instructed within 90 days.
Suspension of certification can only be lifted when the minimum annual CPE and AMF requirements are met. From the date of suspension, members will have a grace period of 90 days to get their CPE credits and AMFs up to date. If a member does not fulfill all CPE and AMF requirements within this 90 days, the member's membership will be terminated, and his or her certifications will be revoked.
Regaining Membership and Certification if Certification Has Been Terminated
If your certification is terminated, you will need to:
Certification holders that allow their credential to expire will be subjected to a $35 USD reinstatement fee upon re-certification through re-passing the required examination(s).