IT and Cybersecurity. Workforce Development with CompTIA Certification

Transcription

1 IT and Cybersecurity Workforce Development with CompTIA Certification

2 CompTIA solutions meet the federal IT security workforce challenge Federal agencies and contractors face an urgent and unrelenting need for highly skilled IT and cybersecurity workers to meet performance objectives and protect against cybersecurity threats that now appear every hour of every day. CompTIA, the non-profit trade association for the IT industry, offers a critical solution to help address this complex challenge: vendor-neutral certifications designed to strengthen and verify the IT security workforce. Top 5 Benefits of Certified IT Staff (From the perspective of IT managers) 1 Better able to understand new or complex technologies 2 More insightful problem solving Developed in collaboration with experts from industry, government, and academia, CompTIA certification ensures that professionals have the foundation knowledge and skills required by a majority of IT job roles from the entry-level technician, to the Linux professional, to the IT security lead in multi-location, enterprise environments. More productive 3 IT workforce 4 Better project management skills Source: CompTIA, Employer Perception of IT Training and Certification, Better communication skills Introduced in 1993, CompTIA certification is now pervasive, held by federal employees, contractors, armed-service corps and veterans alike. CompTIA certification vouchers appear on GSA schedules and other government contract vehicles available from CompTIA-authorized partners. CompTIA certification is portable across divisions, sectors, and international boundaries. In particular, the CompTIA A+, Network+, and Security+ certifications are nationally and internationally recognized as ISO Personnel Certification Accreditations. CompTIA and its authorized training, content, and testing partners are responsive to government sector needs and work closely with both agencies and contractors to develop programs that validate IT workers competencies in specific job roles. A flexible continuing education program encourages new CompTIA certification holders to keep their IT skills and knowledge sharp. To learn more about how CompTIA certification prepares the federal IT security workforce to meet performance objectives and defend against cybersecurity threats, governmentinfo@comptia.org and visit certification.comptia.org. CompTIA Provides the Top 3 Certifications Held by Cleared Professionals 1. CompTIA Security+ 2. CompTIA A+ 3. CompTIA Network+ 4. ITIL 5. CISSP 6. PMP 7. MCSE 8. CCNA 9. MCP 10. MCSA Source: ClearanceJobs.com and Dice.com study of technology professionals, March 2011 Source: ClearanceJobs.com and Dice.com study of technology professionals, March 2011

3 Certification and Government Workers Positive impact beyond the exam Federal Feedback on Commercial Certifications IT leaders in federal defense agencies report that commercial IT certifications improved their employees ability to identify and resolve incidents, communicate, and prevent data-spillage 3 Personnel w/ia (information assurance) certifications better able to correctly identify incidents impacts situational awareness (JITC, BD09) 3 Common lexicon provided by certifications improved communications between CND/SPs (Computer Network Defense Service Providers) and help desks enables issues to be resolved at lower level (Agency CISO) 3 Certification improves performance for all, even those who failed the test (EUCOM study) 3 Training and certifying the military Cyber workforce improves retention (INSCOM NCO) 3 The greater the number of certified personnel, the lower the incidence of data spillage (EUCOM Study) 3 Certification provided big picture perspective (Navy Carrier IAM) Improved morale training relevant to the job Re-energized interest in learning Improved advancement scores compared to non-certified personnel Excerpts from the presentation Certification in DoD given by George Bieber, Director, Department of Defense Information Assurance Program (DIAP), at the FISSEA Annual Conference, March 2011 CompTIA Certification for the Federal IT Security Workforce DoD IA Technical Level I approved certification Hardware troubleshooting, repair, and maintenance Operating system and software Networking and security Operational procedures DoD IA Technical Level I approved certification Network technologies Media and topologies Network devices, tools, and management Network security DoD IA Technical Level II approved certification Systems security and network infrastructure Access control and organizational security Assessments and audits Cryptography Server hardware and software Storage Disaster recovery Troubleshooting Pre-project setup, initiation, and project planning Execution and delivery Change control and communication Closure and lessons learned

4 Causes of IT Security Incidents 41% Technology Error 59% Human Error Lack of security training Failure to comply with company security policies Primary sources of human error 50% Lack of resources Lack of security expertise of respondents believe human error will increase significantly or moderately as a factor over next two years Source: CompTIA, 8th Annual Global Information Security Trends, November 2010 CompTIA IT Certification Roadmap What commercial certifications are needed for specific IT careers or roles? Use the CompTIA online, interactive IT Certification Roadmap to learn how certifications from CompTIA and other organizations advance IT skills and job roles from novice to expert levels. The roadmap identifies the enormous landscape of certifications that support IT roles in project management, service/helpdesk, or security, for example. In addition, it connects users with information about each certification and organization listed. The CompTIA IT Certification Roadmap can be found at: certification.comptia.org/certroadmap.aspx CompTIA Certification CASP for Enterprise IT Security Leads The CompTIA Advanced Security Practitioner (CASP) certification validates technical knowledge, skills, and abilities that the information assurance workforce needs to implement secure IT solutions in complex environments. The CASP exam tests for both knowledge and skills, presenting multiple-choice, scenariobased, and performance-based challenges. Coverage areas include enterprise security, risk management, policy and procedures, legal, research and analysis, and the integration of computing, communications, and business disciplines. CASP is ideal for: Minimum of 10 years experience in IT admin; at least 5 years of hands-on, technical security expertise System architecture, essential system services and security Installation and package management GNU and UNIX commands File systems and hierarchy standards Shells, scripting, and data management Enterprise security Risk management, policy/procedure, and legal Research and analysis Integration of computing, communications, and business disciplines Security certification (e.g. CompTIA Security+) holders going to CISSP or product-specific certifications; Those seeking compliance with IA Technical Level III and IA Management Level II of U.S. DoD Directive M. (CASP is proposed to the 8570 Directive for these workforce categories.)

5 Why Certify with CompTIA? Standards CompTIA certification validates both knowledge and skills, and is developed in collaboration with subject matter experts (SMEs) from the IT industry, government, and academia. Vendor-neutrality CompTIA certification provides the vendor-neutral, platform-neutral knowledge that IT employees need in their careers. Impartiality CompTIA develops IT certification exams, while its authorized channel partners deliver the certification training, content, and elearning. Accreditation CompTIA A+, CompTIA Network+, and CompTIA Security+ certifications are accredited by the American National Standards Institute (ANSI) under the ISO standard. Trust and Experience CompTIA has certified more than 1.5 million people since 1993, including students, government employees, armed services corps, veterans, consultants, business owners, managers, and CIOs. Validation and Accountability A CompTIA-certified status verifies that an IT employee has the knowledge and skills within the subject job function and role. Continued Learning CompTIA s flexible continuing education program drives certification holders to update their IT knowledge and skills. Global Accessibility Headquartered in Chicago, CompTIA also has offices in Beijing, Düsseldorf, Guragon, Hong Kong, Johannesburg, London, San Francisco, São Paulo, Sydney, Tokyo, Toronto, and Washington, D.C., to support our domestic and international membership, certification holders, and CompTIA-authorized channel partners. Portability CompTIA certification is recognized across agency divisions, industry sectors, and international boundaries. Scope CompTIA certification maps to competencies required by a majority of IT job roles.

6 Federal Agencies, Contractors, and CompTIA Certification Almost every U.S. federal government agency and major contractor employs workers who hold one or more CompTIA certifications as a part of their IT workforce development strategies. Federal agencies include: U.S. Department of Agriculture U.S. Department of Commerce U.S. Department of Defense Air Force Army Marines Navy Defense Information Systems Agency (DISA) U.S. Department of Education U.S. Department of Energy U.S. Department of Health and Human Services U.S. Department of Homeland Security U.S. Coast Guard U.S. Department of Justice U.S. Department of Housing and Urban Development U.S. Department of State U.S. Department of Transportation Federal Aviation Administration U.S. Department of Veterans Affairs U.S. Internal Revenue Service Contractors include: Advanced Systems Development (ASD) Booz Allen Hamilton General Dynamics HP-Electronic Data Systems (EDS) Lockheed Martin Northrop Grumman Raytheon SAIC CompTIA Promotes Continuous Learning CompTIA recently enhanced its CompTIA A+, CompTIA Network+, and CompTIA Security+ certification programs to promote ongoing workforce development. In addition to updated and revised exam objectives, these certifications now include a continuing education component that encourages new certification holders to keep up with the rapid pace of information technology even after they pass the certification exams. Individuals certified on or after January 1, 2011, can maintain their certifications in two ways: 1. Pass the most current CompTIA exam prior to the three-year expiration date. 2. Enroll in CompTIA s new Continuing Education (CE) program. For more information, visit us at: certification.comptia.org/ce GET IT For more information CompTIA is the voice of the world s information technology (IT) industry. As a non-profit trade association advancing the global interests of IT professionals and companies, we focus our programs on four main areas: education, certification, advocacy, and philanthropy. CompTIA Government Resources CompTIA Certification Information for Government: certification.comptia.org/getcertified/government.aspx CompTIA IT Certification Roadmap: certification.comptia.org/certroadmap.aspx Contact: governmentinfo@comptia.org CompTIA Worldwide Headquarters CompTIA Certifications, LLC 3500 Lacey Road, Suite 100 Downers Grove, IL CompTIA Properties, LLC, used under license by CompTIA Certifications, LLC. All rights reserved. All certification programs and education related to such programs are operated exclusively by CompTIA Certifications, LLC. CompTIA, A+, CDIA+, CTP+, CTT+, Network+, PDI+, Project+, RFID+, Security+, and Server+ are registered trademarks of CompTIA Properties, LLC in the U.S. and internationally. Other brands and company names mentioned herein may be trademarks or service marks of CompTIA Properties, LLC or of their respective owners. Reproduction or dissemination prohibited without written consent of CompTIA Properties, LLC. Printed in the U.S. July US