How to Get Certified as a Technology Risk Analyst

Technology risk analysts work to improve the security of information systems.

A technology risk analyst identifies risks to the cybersecurity of an organization and helps create the prevention and response mechanisms used by a business to keep its technological systems safe. Career opportunities for a certified risk analyst include work in counterterrorism, cyberintelligence and Web security. Technology risk analysts may hold a certification from the International Information Systems Security Certification Consortium, or (ISC)2, such as the Certified Information Systems Security Profession designation, or CISSP, among others.

Things You'll Need

• Degree in computer science or information security
• Minimum four years' working experience
• Exam application form
• Exam fees
• "Common Body of Knowledge" publication
• Contact details for an (ISC)2 certified professional

Instructions

1. Find out if you are eligible to take the CISSP examination. Eligibility requirements include having a minimum of five years’ experience in information security. Alternately, you may be eligible if you hold an appropriate degree in computer science or an advanced degree in information security issued by a national or regional Center of Excellence established countrywide by the government and universities, as well as a minimum of four years’ experience.

2. Download the exam application form. Complete it, including details of your qualifications and experience. Submit the form to (ISC)2 with the application fee, which ranges from $250 (for early registration) to $549.

3. Complete the CISSP Candidate Agreement, which requires you to confirm that the information you have provided about your qualifications and experience is true and correct. You also must commit to following the CISSP code of ethics and provide responses to questions about your background and criminal history.

4. Study the "Common Body of Knowledge" publication for the CISSP designation, which focuses on 10 areas, including access control systems, business continuity planning, security management practices and security for telecommunications, networks and Internet systems.

5. Take the CISSP exam. You have six hours to complete 250 multiple-choice questions based on the "Common Body of Knowledge" and must obtain a score of at least 700 points to pass. The score is converted to a proportionate score against a maximum of 1,000 points.

6. Obtain an endorsement. Once you pass the CISSP exam, you receive a blank endorsement form from the organization. Have the form completed and signed by another certified professional who holds any valid (ISC)2 credential who can confirm that your claims are true to the best of his knowledge and you are “in good standing” in the information security field.

7. Prepare to be audited. (ISC)2 selects candidates randomly for auditing; if you are chosen, you must be able to prove your claims of professional experience to the satisfaction of the auditor.

8. Work to maintain your certification status according to the requirements of (ISC)2. All holders of credentials through the organization are required to earn credits through continuing professional education to keep the designation valid.

References

• Fidelity Careers: Fidelity Technology Group
• Analysts International Corporation: Senior IT Security Analyst Job Description
• (ISC)2: Certification Programs
• CISSP: CISSP Certification Exam
• (ISC)2: Exam Registration Form
• (ISC)2: Applicant Endorsement Form

Resources

• (ISC)2: About (ISC)2
• NCOE: Resources -- Centers of Excellence
• (ISC)2 : Examination Scoring FAQs