Success Factors and Pitfalls in Security Certifications

摘要

Modern society is increasingly dependent on information systems. These systems have, however, vulnerabilities which open an attack route to the key functions of society, including critical infrastructures. There is increasing demand of assurance that the vulnerabilities are under control. Security certifications have been created to respond to this need. They are used as quality labels, a valid and reliable assurance of security. Despite their usefulness, certifications are not perfect. This article presents an analysis of success factors and pitfalls in three categories of certifications: products, security management systems, and security professionals.