Certifications Galore

So you want to get ahead in the InfoSec domain...... and you are already in the profession, or you want in. Either way there is a lot to do and zillions of options available.

While you go in for a new certification, remember that your work experience is of paramount importance. Most are professional certifications which means that you are working or have work ex in the specialization and are seeking to get the certification which will establish your knowledge leadership.


Here I shall try to put together as many certification / education resources I can identify, and if I have missed any, I shall welcome any such direction.

Highly recognized certifications are :
- CISA
- CISM
- CISSP
- CIA
- CFE
- CBCP
- ITIL (is not a certification, but has three (?) certification levels)
- ISO 27001 (again this is not a certification but then there are certifications for Implementation or for Lead Auditors)
- CEH
- CIPP

There are certifications in Governance, Risk Management, Forensics, Fraud, Testing, Methodologies etc etc etc ....... practically every domain in the GRC domain.

With time this space will have links and information about the certifications, their pre-requisites and available resources.