Characteristics of CISP qualification certification 1. National certification
According to the authorization of the state, CNITSEC carries out the certification of information security products, information system security, information security service qualification and information security personnel qualification, and issues corresponding certificates to those who pass the certification. "People's Republic of China (PRC) National Information Security Certification" is the highest recognition of the quality of information security products.
2. Knowledge system
The knowledge framework of CISP lists the knowledge fields related to information security, which are divided into four knowledge fields: information security system and model, security technology, security management and engineering process (see figure 1), thus avoiding narrow understanding and one-sided teaching that only emphasizes technology and ignores practice in information security training.
3. Curriculum design
The training course designed according to CISP knowledge architecture covers four modules: information security theory, information security technology, information security engineering and management, information security standards and laws and regulations, so that students can learn comprehensively and systematically. In addition, according to the requirements of the post and occupation, the course also highlights the learning focus of people in different positions and the special courses that need to be studied in different positions.
4. Classification of qualification certification
According to different jobs and functions and the ability requirements of these positions, the qualifications of information security practitioners are classified and certified, including Certified Information Security Engineer (CISE), Certified Information Security Manager (CISO) and Certified Information Security Auditor (CISA).
5. Keep learning
Through the maintenance of CISP certification, Certification staff is encouraged to actively participate in and engage in professional activities related to information security, maintain a continuous learning state, and closely combine certification with his own career development.
Through the organic combination of knowledge structure, training course design and qualification certification, CISP qualification certification has formed a set of information security professional certification system with knowledge structure as the link, modular course design as the basis and information security training and education as the ultimate goal.
Through the evaluation and certification of personnel's professional qualifications, the ability of information security-related practitioners will be recognized and guaranteed by authority. At the same time, an effective supervision and incentive mechanism will ensure the quality of certification to the maximum extent and promote the professional development of Certification staff.
Chinese Name: Jiangsu Food and Drug Vocational and Technical College
Abbreviation: Sushiyuan
Established: 19