Understanding the Federal IT Security Professional (FITSP) Certification

Transcription

1 Uderstadig the Federal IT Security Professioal (FITSP) Certificatio ISSA-Natioal Capital Chapter Ceter for America Progress September 20th, 2016 Jim Wiggis Executive Director Federal IT Security Istitute

2 Overview Speaker Itroductio What is FITSI? Why a Federal Focused Credetial? FITSP Overview Certificatio Roles Cadidate Requiremets Domais Exam Details Recertificatio Requiremets Maiteace Details Audits Program Updates Govermet Adoptio ANSI Accreditatio / 8570 Traiig Opportuities Questios?

3 Speaker Itroductio Mr. Jim Wiggis Cyber Security Traier ad Iformatio Assurace Practitioer 18 years of experiece i IT 14 years of experiece i IT security Federal Iformatio System Security Associatio (FISSEA) Educator of the Year for 2010 holds the followig IA/IT security certificatios: FITSP-M, CISSP, ISSEP, CISM, CISA, SCNA, SCNP, CAP, IAM, IEM, SSCP, CEH, ECSA, CHFI, LPT, TICSA, CIWSA, Security+, ad MCSE: Security

4 What is FITSI? FITSI = Federal IT Security Istitute Fouded i members 501c6 o-profit orgaizatio Focused o educatio ad certifyig the federal workforce Supports local chapters FITSI-DC FITSI-CO FITSI-SC Supports the FITSI Foudatio 501c3 Setup for charitable, research ad educatio i the cybersecurity market

5 What is FITSI? FITSI Foudatio Setup to support Wouded Warrior Cyber Combat Academy Build the Next Geeratio of Cyber Defeders Retai Wouded Warriors i the ways of cybersecurity

6 What is FITSI? FITSI Activities Chapter evets Free olie webiars Discouted traiig FITSP certificatio program

7 Why a Federally Focused Credetial? May high quality IT security certificatios o the market Not focused o the uique requiremets of: Federal sector Federal workforce Based upo iteratioal best practices May are oe size fits all programs CISO ad system egieer might obtai the same credetial

8 Why a Federally Focused Credetial? All sectors of the govermet are adoptig oe stadard Joit Task Force Trasformatio Iitiative U.S. Departmet of Defese Office of the Director of Natioal Itelligece Natioal Istitute of Stadards ad Techology Committee o Natioal Security Systems NIST Risk Maagemet Framework

9 FITSP Overview Federal IT Security Professioal (FITSP) A IT security certificatio program Role-based Targeted at the Federal workforce Civilia persoel Military Cotractors Complemets the kowledge, skills ad abilities of other geeralist security certificatios Based upo the stadards ad practices used by the Uited States Federal govermet NIST, OMB, Cogressioal madates

10 Certificatio Roles Role-based program Maager - Oversight Desiger - Builds Operator - Maitais Auditor - Reviews

11 Cadidate Requiremets Cadidates must have five years of IT security experiece Ca waive up to two years Bachelors i IT or IT security Master s degree i IT or IT security Existig certificatio Must documet experiece Formal applicatio process

12 Domais Six areas of kowledge NIST Special Publicatios NIST Federal Iformatio Processig Stadards NIST Cotrol Families NIST Risk Maagemet Framework Govermet Laws ad Regulatios NIST Iteragecy Reports Each role has differet cocetratio ad focus of these domais Refer to the FITSI Cadidate Hadbook for each role o FITSI.ORG for a breakdow of these domais

13 Exam Details Computer-based exam 180-miute 150 multiple choice questios May of the questios are small scearios Allow the FITSI cadidate to demostrate the level of experiece ad proficiecy the have achieved Istat kowledge of results Pass or fail Curret cost of exam $295 per attempt FITSI membership is ot required

14 Recertificatio Requiremets Certificatio is good for three years Must ear 60 CPEs each three years to maitai currecy FITSI has published guidace o the private member site o how to ear ad report CPEs Must pay a $45 Aual Maiteace Fee (AMF)

15 Maiteace Details Must ear 60 CPEs over 3 year period Examples Atted security cofereces - 1 CPE for each hour of IT security discussio covered i the coferece Atted security traiig classes - 1 CPE for each hour of istructio. These classes ca be istructor lead (ILT), olie or computer based traiig modules (CBTs). Publish security whitepapers - 1 CPE for each hour writig a whitepaper ot to exceed 5 CPE per published whitepaper Publish security books - 1 CPE for each hour writig a book ot to exceed 30 CPEs per published book Provide IT security traiig classes - 3 hours of prep time for each hour of i-class time Provide NIST commetary o draft documets - 1 CPE for each hour of workig o submittig commetary ot to exceed 5 CPE per activity

16 Audits All members are subject to potetial audits Experiece backgroud Reported CPEs each year

17 Program Updates Cotet is updated o a yearly basis Members ad certificatio holders are asked to make recommedatios o ewer guidace ad stadards Leverage three primary areas for updates Cogress OMB NIST

18 Govermet Adoptio Both the Departmet of State (DOS) ad the Departmet of Homelad Security (DHS) have approved FITSI Certificatios for their workforce!

19 ANSI Accreditatio / 8570 / 8140 ANSI provides accreditatio to certificatio bodies uder ISO FITSI has applied for ANSI Accreditatio FITSP-Maager Workig with ANSI Assessors to determie ocoformities ad required program chages ANSI Accreditatio is the first step towards 8570 / 8140 All certificatios o the 8570 / 8140 are required to be ANSI accredited

20 Traiig Opportuities Classes are ru both through FITSI ad Authorized Traiig Parter FITSI Authorized Traiig Ceter Program SecureNija PhoeixTS Cyber Defeses Kowlogy Securible, LLC

21 Questios? Questios ad Aswers

22 Cotact Iformatio Speaker Iformatio Jim Wiggis Work: x701 Cell: FITSI Iformatio Federal IT Security Istitute 3213 Duke St #190 Alexadria, VA Phoe:

23 Recap Speaker Itroductio What is FITSI? Why a Federal Focused Credetial? FITSP Overview Certificatio Roles Cadidate Requiremets Domais Exam Details Recertificatio Requiremets Maiteace Details Audits Program Updates Govermet Adoptio ANSI Accreditatio / 8570 Traiig Opportuities Questios?