Security firm adopts global standard

Thursday, January 30 2003 - KUALA LUMPUR: Professional security consulting firm Secure Tangent Sdn Bhd said it has adopted the Certified Information Systems Security Professional (CISSP) programme for its consultants.

CISSP is one of the world's most highly sought-after professional certifications in the information security industry, the company said in a statement.

"The extensive training and CISSP certification ensure our security personnel possess a thorough understanding of the significant issues in the information security field," claimed Beh Swan Swan, Secure Tangent chief executive officer.

"Companies thinking of engaging security consultants must look at certification as part of its selection criteria, as well as understanding the background of the company or knowing the consultants personally. A certification is a good indicator of the strength and credibility of the security consultancy and services it provides," she said.

According to the company, all its IT security consultants must be CISSP certified. There are only about 13,000 who qualify as CISSPs worldwide and out of that, only 25 are Malaysians.

"This number is pretty low, considering the enormous need for uniformity in best practices to be developed for information security," said Beh.

"We are seeing a trend among industry professionals to pursue higher certification and it is critical that IT security consultants increase the standards of their practices to match those of the industry's standards and code of ethics," she added.

The CISSP examination is based on the Common Body of Knowledge (CBK), a regularly updated compendium critical to the information security professional and developed by (ISC)2 members internationally.

The CBK is made up of 10 domains; access control systems and methodology, application and systems development security, business continuity and disaster recovery planning, cryptography, law, investigations and ethics, operations security, physical security, security architecture and telecommunications and network security.

Secure Tangent provides a comprehensive suite of IT security-consulting services ranging from penetration test, setting up security policies to risk assessment.

<< Back to SecureTangent Press Releases