Quick question, which certification body is the accepted/industry-accepted personal certification for ISO 27001 implementer and auditor certifications?
Thanks. I have CISSP and CISM. I am working on CRISC and will do CISA in the fall. In 2005, I did two-weeks of BS7799-2003 training that certified you. Now I was think what would be similar in ISO 27001.
BS7799 is basically the father of ISO 27001 so you should be good there.
For personal certifications there's also Information Security Auditor (ISA) from CIS and probably a bunch of others. However, all of those are from this or that organisation, there is not - to the best of my knowledge - any official certification.
For all practical purposes, not many people seem to care except when it comes to the auditors. For the implementers, in all of my time doing 27001, not one customer has even asked to see my CISM certificate.
But this might be a matter of sphere. I'm mostly in private industries, the military or government orgs might see things differently, though the gov customers I've had so far did not.
Dear , you will find useful information in links below:
https://advisera.com/27001academy/.../how-to-become-iso-27001-lead-auditor/
https://www.saiglobal.com/Assurance/information-communication.../ISO-27001.htm
You can get:
1. CISA
The CISA certification is known worldwide as the recognized achievement for those who control, monitor and assess an organization’s information technology and business systems.
2. CRISC
CRISC (pronounced “see-risk”) is designed for IT professionals who have hands-on experience with risk identification, assessment and evaluation; risk response; risk monitoring; IS control design and implementation; and IS control monitoring and maintenance.
3. CISM
The management-focused CISM is a unique certification for individuals who design, build and manage enterprise information security programs. CISM is the leading credential for information security managers.
4. CGEIT
CGEIT recognizes a wide range of professionals for their knowledge and application of enterprise IT governance principles and practices.
- Badges
- Science topic
- Similar topics
- Social Science
- Media
- Journalism