The Computing Technology Industry Association (CompTIA), a non-profit trade association, was created in 1982 as the Association of Better Computer Dealers, Inc. (ABCD) by representatives of five microcomputer dealerships. Over the course of a decade, ABCD laid the groundwork for many of CompTIA’s initiatives and member benefits.
ABCD later changed its name to the Computing Technology Industry Association to reflect the association's evolving role in the computer industry and in the U.S. business landscape at large.
CompTIA is a provider of professional certifications for the information technology (IT) industry.
Security+
Security+ is a certification dealing with computer security topics such as cryptography and access control, as well as business-related topics such as disaster recovery and risk management. It was developed in 2002 to address the rise of security issues. A new and updated version, SY0-301, was released in 2011. According to CompTIA, there are currently more than 45,000 people around the world who have earned this certification. It is recommended that candidates have two years of security-related work experience (although not a requirement) and pass the 100 question multiple choice exam.
CompTIA Security+ is an international, vendor-neutral certification that demonstrates competency in:
- Network security
- Compliance and operational security
- Threats and vulnerabilities
- Application, data and host security
- Access control and identity management
- Cryptography
The Security+ exam can be applied as an elective to the MCSA: Security and the MCSE: Security specializations from Microsoft. For United States Department of Defense employees, DoDD 8570, IAT Level II certification guidelines lists Security+ as one of four choices (the others being GIAC Security Essentials Certification (GSEC), Security Certified Network Professional (SCNP), and Systems Security Certified Practitioner (SSCP)).
CompTIA Advanced Security Practitioner [CASP]
CompTIA released the CompTIA Advanced Security Practitioner certification on September 15, 2011. "The CompTIA Advanced Security Practitioner (CASP) Certification is a vendor-neutral credential. The CASP certification is intended to follow CompTIA Security+. The CompTIA Advanced Security Practitioner certification was accredited by the International Organization for Standardization (ISO) and the American National Standards Institute (ANSI) on Dec. 13, 2011. The CASP exam will certify that the successful candidate has the technical knowledge and skills required to conceptualize, design, and engineer secure solutions across complex enterprise environments. The CompTIA Advanced Security Practitioner (CASP) Certification is aimed at an IT security professional who has a minimum of 10 years’ experience in IT administration including at least 5 years of hands-on technical security experience.
Check out CompTIA - IT Association @ www.comptia.org
CORE Impact Professional is the most comprehensive software solution for assessing and testing security vulnerabilities throughout your organization.
IBM Rational AppScan Enterprise is a scalable solution to help resolve application security vulnerabilities, offering recommendations to simplify remediation.
HP WebInspect gives security professionals and security novices alike the power and knowledge to quickly identify and validate critical, high-risk security vulnerabilities.
Acunetix Web Vulnerability Scanner (WVS) is an automated web application security testing tool that audits web applications by checking for hacking vulnerabilities.