In a changing world, learned knowledge is a perishable good. Certification requires that the person continuously maintain their skills in order to maintain certification. If changes continue to go as fast or faster in the future, the demand for updated knowledge will probably increase. Personnel certification is a way to secure the quality of skills of people. Certifications are established in the U.S. and starts sought more in Europe.

As a good friend of mine said, "soon you have the entire alphabet on the business card." It is not easy to understand what all the letters mean. Here is an attempt to explain what certifications are.

I tend to simplify a bit and say that it is possible to certify products, processes and people. This article is about the certification of the person, therefore, used the concepts of personnel certification and certification synonymous.

The difference between different yardsticks
When you completed a course, you may receive a course certificate or diploma; this is the most common certificate today. This certifies that the person was present on the course, course certificates and diplomas do not necessarily reflect on the participant acquiring any knowledge. Some courses require an approved writing to get a diploma.

After completed education, as a rule a degree or grade is given. The grade is often based on oral or written tests and should illustrate how much the person has learned. Grades can be constructed in different ways, when I was in school; we had a relative grading system. My parents had the absolute grading system, today the school has the goal oriented, and knowledge related grading system. The grade shows what knowledge the person had at the time of the test and does not take into account that the knowledge gets old or fall into oblivion.

Personnel certification is not a course and no training. Certifications are based on a predetermined set of requirements such as experience, current knowledge and future training. For example, it may require a certain number of years of relevant work experience, some knowledge and continuous maintenance of competence. For example; a background check is investigating previous work, a written test verify knowledge and requires that person to maintain their skills in order to keep the certificate. An internationally recognized certification make the same requirements regardless of where in the world, the certified person has received it. This makes it possible to compare the skills of people from different industries or parts of the world, if they hold the same certification.

Certification is like for a high jumper to qualify to attend the Olympics or World Championships. The requirements correspond to the height of the bar is on. If the bar does not fall down when the person jumped over, then he or she is approved, whether the margin was 1 inch or 10 inches above the bar. But then the person must maintain their skills, in order to keep the certificate.
Grade is like the long jump, after some training you measure how far the person can jump. But there is no requirement to maintain the skills.
A course certificate is as if you have a used ticket to the pentathlon, the person can verify that he sat in the grandstand and looked at the games.

Flight Certificate can only be maintained if the pilot carries out regular fitness test and fly a certain number of flying hours per year, in the category, which the license relates. If the pilot is not flying enough, he or she conducts a more extensive test. That is a good thing, because I would not like to fly with a pilot in a 747 who is self-taught with a computer game or just learned flying a single-engine propeller-driven aircraft.

Personnel Certifications can be divided into two types, technical and professional. Technical certifications are linked to a particular product. Professional certifications are attached to a knowledge area.

All that glitters is not gold
There are also courses and exams that are called certifications, but may not meet the requirements of established personnel certifications. There may be gaps in or completely lack the background check, the knowledge test or a requirement for training. See if the certification is quality assured by an accreditation body in accordance with "ISO/IEC 17024 - General requirements for bodies operating certification of persons". All established certifications are accredited under 17024, but there are also serious certifications are not accredited, but which follows the same rules.

The Personnel Certification's entry to Sweden
The vast majority of certifications in the security originating in the U.S. and certifications are particularly common in the IT industry. IT-related certifications became common in Sweden already in the 90s. When the personal computer made its entrance in the 80s, many enthusiasts sat at home and played with his ABC80 or VIC64. When the Internet became more common and technology went from the mainframe computer to the PC environment in the early 90s, there was a need for staff that knew this technology. The major software manufacturers introduced courses and tests, and the IT staff could acquire a deeper knowledge in the new operating systems. Certification would verify the person's competence for given software; it whittled the wheat from the chaff. Certification makes it easier for recruiters to find qualified personnel.

Personal Certification in Security
Certification in fire protection has existed in the U.S. since 1971 and in Security Management since 1977. 1978 was the year when the first person in Sweden received a certification in Security Management. It was not until the 2000's when the certifications in the security got a foothold in Sweden. Now the interest in personnel certifications increased, perhaps because there is an increased understanding of what certification means. It may also be due to more and more people hold a certification. A security colleague from the telecommunications industry in the U.S. said, "If you do not have CPP, are not called for the interview." We have not come so far in Europe yet, but perhaps we will go in that direction. Something that is interesting in this context is that by international standards and especially in the U.S., there are a lot of courses and programs at universities in the security, although certifications play an important role. It may well be due to the outside world is constantly evolving and certification requires continuous updating.

My teacher at school said you shouldn’t cram for a test, but learn for life. When I took my first certification, I realized that personnel certification is a lifelong learning, because it requires Continuing Professional Education to maintain the certification.

This article was written by Klas Nilsson, translated from Swedish and was published in the Swedish Security Magazine called “Skydd och Säkerhet“ (Safety and Security), December 2008.

Security Manager provides CPP, PSP, PCI Study Group on distance, CPP and CPO Review Courses, Statement Analysis and investigative courses.

Personnel Certifications

Akronym Name Type Origin ISO 17024 Issuer Behörig ingenjör brandlarm Fire Sweden SWEDAC SBSC CAP Certification and Accreditation Professional Information assurance USA ANSI (ISC)2 CFPS Certified Fire Protection Specialist Fire USA ANSI NFPA CISA Certified Information Security Auditor IT audit USA ANSI ISACA CISM Certified Information Security Manager Information Security USA ANSI ISACA CISSP Certified Information Systems Security Professional IT Security USA ANSI (ISC)2 CPP Certified Protection Professional Security Management USA ANSI ASIS International CSP Certified Safety Professional Safety USA ANSI BCSP Fire Sprinklerfitter Mastery Certification Sprinkler system USA ANSI NITC GCFA GIAC Certified Forensics Analyst Computer Forensics USA ANSI GIAC GSEC GIAC Security Essentials Certification SEC 401 Information Security USA ANSI GIAC GCIH GIAC Certified Incident Handler Information Security USA ANSI GIAC GCIA GIAC Certified Intrusion Analyst Information Security USA ANSI GIAC GSLC GIAC Security Leadership Certification MGMT 512 Information Security USA ANSI GIAC ISSAP Information Systems Security Architecture Professional IT system design USA ANSI (ISC)2 ISSEP Information Systems Security Engineering Professional IT accreditation USA ANSI (ISC)2 ISSMP Information Systems Security Management Professional Information Security USA ANSI (ISC)2 PCI Professional Certified Investigator, Board Certified Investigation USA ANSI ASIS International PSP Physical Security Professional, Board Certified Physical Security USA ANSI ASIS International Security+ CompTIA Security+ IT Security USA ANSI CompTIA SSCP Systems Security Certified Practitioner IT Security USA ANSI (ISC)2 Security Certifications without Accreditation. (ANSI) indicates that they have applied for accreditation. ABCP Associate Business Continuity Professional Continuity USA DRI International BCCE Business Continuity Certified Expert Continuity Singapore BCM Institute BCCP Business Continuity Certified Planner Continuity Singapore BCM Institute BCCS Business Continuity Certified Specialist Continuity Singapore BCM Institute BSCP Building Security Certified Professional Construction USA BSC CAS Certified Anti-Terrorism Specialist Anti-terrorism USA ATAB CMAS Certified Master Anti-Terrorism Specialist Anti-terrorism USA ATAB CBCP Certified Business Continuity Professional Continuity USA DRI International CBCV Certified Business Continuity Vendor Continuity USA DRI International CCMSE Check Point Managed Security Expert IT Security USA Check Point CCSA Check Point Certified Security Administrator IT Security USA Check Point CCSE Check Point Certified Security Expert IT Security USA Check Point CCSP Cisco Certified Security Professional IT Security USA (ANSI) Cisco Systems CCSPA Check Point Certified Security Principles Associate IT Security USA Check Point CEECS Certified Electronic Evidence Collection Specialist Certification Computer Forensics USA IACIS CEH Certified Ethical Hacker IT Security USA (ANSI) EC-Council CFCE Certified Forensic Computer Examiner Computer Forensics USA IACIS CFCP Certified Functional Continuity Professional Continuity USA DRI International CFE Certified Fraud Examiner Fraud Prevention USA ACFE CFI Certified Fire Inspector Fire USA NFPA CFPE Certified Fire Plan Examiner Fire USA NFPA CGEIT Certified in the Governance of Enterprise IT IT Governance USA (ANSI) ISACA CHCPA Certified Health Care Protection Administrator Sjukvårdssäkerhet USA IAHSS CHFI Computer Hacking Forensic Investigator IT Security USA (ANSI) EC-Council CHS Certified in Homeland Security Homeland Security USA (ANSI) ACFEI CIFI Certified Information Forensics Investigator Computer Forensics USA IISFA CITRMSR Certified Identity Theft Risk Management Specialist Information Security USA ICFE CLSD Certified Lodging Security Director Hotel Security USA AH&LA CLSO Certified Lodging Security Officer Hotel Security USA AH&LA CLSS Certified Lodging Security Supervisor Hotel Security USA AH&LA CNDA Certified Network Defence Architect IT Security USA (ANSI) EC-Council CPCS Check Point Certified Specialist IT Security USA Check Point CPO Certified Protection Officer Security Guard USA IFPO CPOI Certified Protection Officer Instructor Instructor USA IFPO CSC Certified Security Consultant Security Consultant USA IAPSC CSC Certifierad Säkerhetschef Security Management Sweden Företagsuniversitetet CSC Certifierad Säkerhetschef Security Management Sweden SSF CSP RSA Certified Security Professional IT Security USA RSA CSPM Certified Security Project Manager Security Project USA SIA CSSM Certified in Security Supervision and Management Security Management USA IFPO DRCE Master Business Continuity Professional Continuity Singapore BCM Institute DRCE Disaster Recovery Certified Expert Continuity Singapore BCM Institute DRCS Disaster Recovery Certified Specialist Continuity Singapore BCM Institute ECSA EC-Council Certified Security Analyst IT Security USA (ANSI) EC-Council ENSA EC-Council Network Security Administrator IT Security USA (ANSI) EC-Council EnCE EnCase Certified Examiner Computer Forensics USA Guidance Software IAM Information Systems Security Assessment Methodology Information Security USA IATRP IEM Information Systems Security Evaluation Methodology Information Security USA IATRP ISSPCS ISSPCS Practitioner Information Security Australien ISSPCS ISP Industrial Security Professional Security Management USA (ANSI) NCMS LPT Licensed Penetration Tester IT Security USA (ANSI) EC-Council MBCP Master Business Continuity Professional Continuity USA DRI International SCNA Security Certified Network Architect IT Security USA (ANSI) SCP SCNP Security Certified Network Professional IT Security USA (ANSI) SCP SCSE Symantec Certified Security Engineer (discontinued) IT Security USA Symantec SCSP Symantec Certified Security Practitioner (discontinued) IT Security USA Symantec Security5 Certification for Knowledge Workers IT Security USA (ANSI) EC-Council SPS Symantec Product Specialist IT Security USA Symantec SSI Sensitive Security Information Information Security USA ACFEI STA Symantec Technology Architect IT Security USA Symantec VSSD Video Security Systems Designer Physical Security USA NICET VSST Video Security Systems Technician Physical Security USA NICET Security related courses, with the word Certification in it's name AHC Anti-Hacking Certification (course) IT Security USA Security University AISC Advanced Information Security Certification (course) Information Security USA Security University CSC Certifierad Säkerhetschef (course) Security Management Sweden LOKE Certifierad Säkerhetschef (course) Security Management Sweden SSF HCS Högre Certifierad Säkerhetschef Security Management Sweden OffSÄK PCIP Professional in Critical Infrastructure Protection (course) National Security USA CI-Institute SSEC Software Security Engineering Certification (course) IT USA Security University Misc. Certifications CABM Certified Associate Business Manager Business Management USA (ANSI) APBM CBM Certified Business Manager Business Management USA (ANSI) APBM CCM Certified Construction Manager Construction USA ANSI CMCI CCENT Cisco Certified Entry Networking Technician IT USA (ANSI) Cisco Systems CCNA Cisco Certified Network Associate IT USA (ANSI) Cisco Systems CCSA Certification in Control Self-Assessment Audit USA IIA CHMM Certified Hazardous Materials Manager Hazmat USA ANSI IHMM CHMP Certified Hazardous Materials Practitioner Hazmat USA ANSI IHMM CIA Certified Internal Auditor Audit USA IIA CITP Certified Information Technology Professional IT USA AICPA CMP Certified Meeting Professional Meetings USA CIC CPA Certified Public Accountant Audit USA AICPA CSA Control Self-Assessment Audit USA IIA MCAD Microsoft Certified Applications Developer IT USA (ANSI) Microsoft MCDBA Microsoft Certified Database Administrator IT USA (ANSI) Microsoft MCDST Microsoft Certified Desktop Support Technicians IT USA (ANSI) Microsoft MCP Microsoft Certified Professional IT USA (ANSI) Microsoft MCSD Microsoft Certified Solutions Developer IT USA (ANSI) Microsoft MCSA Microsoft Certified Systems Administrator IT USA (ANSI) Microsoft MCSA Microsoft Certified Systems Administrator: Security Specialization IT USA ANSI Microsoft MCSE Microsoft Certified Systems Engineer IT USA (ANSI) Microsoft MCT Microsoft Certified Trainer IT USA (ANSI) Microsoft PMP Project Management Professional Project Management USA ANSI PMI

Please Contact us if you want to turn your Security Program from Cost to a Valuable Asset.