Peter H. Gregory - CISSP For Dummies

Most sanctioned (ISC) 2volunteer activities are eligible for CPE credits. Check with (ISC) 2for details.

The state of technology, laws, standards, and practices within the CISSP Common Body of Knowledge (CBK) is continually changing and advancing. To be effective and relevant, CISSP exams need to have fresh new exam questions that reflect how security is done today. Therefore, people working in the industry — such as you — need to write new questions. If you’re interested in being a question writer, visit the (ISC) 2website to apply.

(ISC) 2now holds more security-related events worldwide than it has at any other time in its history. More often than not, (ISC) 2speakers are local volunteers — experts in their professions who want to share with others what they know. If you have an area of expertise or a unique perspective on CISSP-related issues, consider educating others via a speaking engagement. For more information, visit the (ISC) 2website at www.isc2.org/Membership/Volunteer-Grow , and find the speaking opportunities that interest you.

If you speak at an (ISC) 2Congress, your conference fees are waived. You need to pay only for transportation, lodging, and meals.

(ISC) 2puts on a fantastic annual conference called the (ISC) 2Congress. This conference is an excellent opportunity to learn new topics and meet other infosec professionals. But the conference doesn’t run itself; it’s powered by volunteers! Go to the (ISC) 2Congress website at https://congress.isc2.org to find information about volunteering.

(ISC) 2publishes quarterly online magazines called InfoSecurity Professional INSIGHTS and Cloud Security INSIGHTS that are associated with InfoSecurity Professional magazine. You can find out more at www.isc2.org/InfoSecurity-Professional/InfoSecurity-Professional-Insights .

The (ISC) 2Blog is a free online publication for all (ISC) 2members. Find the blog, as well as information about writing articles, at https://blog.isc2.org .

The Center for Cyber Safety and Education, formerly the (ISC) 2Foundation, is a not-for-profit charity formed by (ISC) 2in 2011. The center is a conduit through which security professionals can reach society and empower students, teachers, and the general public to secure their online lives through cybersecurity education and awareness programs in the community. The center was formed to meet those needs and expand altruistic programs, such as Safe and Secure Online, the Information Security Scholarship Program, and industry research (the center’s three core programs). Find out more at www.iamcybersafe.org .

As an (ISC) 2member, you can earn CPE credits and contribute to a safer world by participating in Bugcrowd’s bug-bounty programs. You even have a chance to be honored in the organization’s hall of fame. Find out more at www.bugcrowd.com/customers/isc-2 .

(ISC) 2has developed focus groups and quality-assurance testing opportunities. (ISC) 2is developing new services, and it needs to receive early feedback during the requirements and design phases of its projects. Participating in these groups and tests can influence future (ISC) 2services that will aid current and future certification holders. (ISC) 2doesn’t have a web page dedicated to this topic; you’ll be notified of opportunities by email.

(ISC) 2has developed a new interactive community that’s full of discussion groups. With more than 16,000 members in the first year, the community is well designed and easy to use. The community has more resources than we can list here! You can sign up and join discussions at https://community.isc2.org .

Many communities have CISSP study groups that consist of volunteer mentors and instructors who help those who want to earn the certification.

If your community doesn’t have a CISSP study group, consider starting one. Many communities have them already, and the organizers can give you advice on starting your own. You can find out more from nearby (ISC) 2chapters and other local security groups, or visit https://community.isc2.org/t5/Study-Groups/ct-p/CertificationStudyGroups to find a group near you.

In no way are we being vain or arrogant when we say that we (the writers of this book and you, the readers) know more about data security and safe Internet use than perhaps 99 percent of the general population, for two main reasons:

Security is our profession.

Security is not always easy to do.

A legion of volunteer opportunities is available to help others keep their computers (and mobile computing devices) secure and use the Internet safely. Here is a concise list of places where you can help:

Service clubs

Senior centersWHY VOLUNTEER?Why should you consider volunteering for (ISC)2 or for any other professional organization? Here are two main reasons:Volunteerism of any kind is about giving back to a larger community. Consider the volunteers who helped you earn your CISSP certification. There are many of them, but they aren’t always visible.Volunteering looks good on your résumé. We consider this fact to be a byproduct of volunteering, not the primary reason for it.Volunteering for (ISC)2 or any other cause should be a reflection of your character, not simply an activity to embellish your résumé. Although your intention in volunteering may be to help others, volunteering will also change you — for the better.Consider it a good idea to periodically check the (ISC)2 website for other ways you can help.

Schools (be sure to read about Safe and Secure Online earlier in this chapter)

Alumni associations and groups

Your place of employment

Using a little imagination, you can undoubtedly come up with additional opportunities. The world is hungry for the information you possess!

In addition to (ISC) 2, many security organizations worldwide have local chapters, perhaps in or near your community. Here’s a short list of some organizations that you may be interested in:

International Systems Security Association (ISSA): www.issa.org

ISACA: www.isaca.org

Society for Information Management (SIM): www.simnet.org

InfraGard: www.infragard.net

Open Web Application Security Project (OWASP): https://owasp.org

ASIS International: www.asisonline.org

High Technology Crime Investigation Association (HTCIA): https://htcia.org

Risk and Insurance Management Society (RIMS): www.rims.org

Society of Information Risk Analysts (SIRA): www.societyinforisk.org

The Institute of Internal Auditors (IIA): www.theiia.org