The Growing Importance of ISACA Certifications

In late September of 2006, the number of certified professionals who had earned the Certified Information Systems Auditor (CISA) certification reached 50,000, and the year of 2006 also included a number of other milestones for the Information Systems Audit and Control Association (ISACA). The IT certification programs provided by this organization have been growing both in number and in importance, and a growing number of companies are coming to understand the importance of these certification programs.

One of the driving forces behind the popularity of the ISACA certifications is the introduction of a new program by the Department of Defense, announced this past May. Under the Department of Defense's Information Assurance Workforce Improvement Program, both CISA and CISM have been made approved certifications, and under the Department of Defense directives as many as 80,000 professionals will be required to earn one of 13 different certifications offered by some five different organizations.

The information assurance professionals working for the Department of Defense are classified into two different categories - information assurance technical (IAT) and information assurance managerial (IAM). These two classifications are further divided into three levels, with CISA among the four approved baseline certifications for IAT level III. In addition, CISM is among three approved certifications for IAM level II and III professionals.

In addition to these Department of Defense professionals, the assistant examiners employed at U.S. Federal Reserve Banks will also be required to pass the CISA exam before they can be eligible for commissioning.

One of the chief reasons behind the growing importance of the CISA and CISM certifications is the fact that these credentials are based on experience. While there are many certifications which are based on technical skill, these certifications have additional value with employers due to the experience requirement. This experience requirement helps IT professionals to be better prepared to perform the job duties for which they are hired.

The Beginnings of ISACA

The organization known as ISACA traces its start back to 1967, when a small group of people holding similar jobs, namely auditing controls in the computer systems that were becoming increasingly critical to their organization, met to discuss the need for a centralized point of information and guidance for workers in this specialized field.

By 1969 the group had formalized and incorporated as the EDP Auditors Association. Later, in 1976, the association would form an educational foundation tasked with undertaking large scale research efforts in order to expand the knowledge level and value of IT governance and control.

These days ISACA boasts a membership of more than 50,000 individuals around the world, and the organization is characterized by its diversity as well as its professionalism. The members of ISACA live and work in more than 140 countries around the world, and this membership includes professionals from a variety of IT fields, including consultants, educators, regulators, security engineers, internal auditors and even chief information officers.

The CISA Program

The CISA program has been a universally accepted standard of achievement for IS audit, control and security professionals since 1978, and many company hiring managers and IT recruiters recognize the importance of this certification. The road to the coveted CISA designation is a long with, with candidates required to:

• Successfully complete and pass the CISA examination. This examination is offered twice per year at more than 200 locations.
• Strictly adhere to the ISACA Code of Professional Ethics and agree to comply with the organization's continuing professional education policy.
• Submit evidence of at least five years of professional IS auditing, control or security work experience.

The CISM Program

The CISM certification program has been developed to allow experienced information security managers to demonstrate their skills. The CISM certification is intended for those whose job responsibilities include information security management, including those who manage, design, oversee and assess the security of information in the enterprise.

The purpose of the CISM certification is to promote international practices and provide executive management with an assurance that those who have earned this credential possess the experience they will need to provide effective services in the areas of security management and consulting.

In order to earn the CISM certification, candidates must complete the following steps:

• Take and pass the CISM examination
• Adhere to the ISACA Code of Professional Ethics, and agree to comply with the organization's continuing education requirements.
• Submit proof of at least five years of experience in the IS field, including at least three years as an information security manager.

Those workers interested in gaining the certification and training they need to compete may want to consider the computer based training courses offered by CBT Planet. CBT Planet is proud to offer a wide array of training choices designed with the IT professional in mind, including programs by Microsoft MCSE, Cisco CCNA, CompTIA A+, Oracle, Red Hat, Sun, IBM and others. In addition, CBT Planet also offers courses in a number of popular desktop applications, including the Microsoft Office productivity suite. Contact CBT Planet today to discuss your training, certification and career advancement goals.