2. Index.
1.General concepts of Information Security
2.CISO (Chief Information Security Officer)
3.Certifications related to Information Security
3.1. CISSP
3.2. CISA,
3.3. Security+

3. What is security?
Information security is defined as
“protecting information and information systems
from unauthorized access, use, disclosure,
disruption, modification, or destruction”

4. When Are We Secure?
Are we secure if our systems are properly patched?
Are we secure if we use strong passwords?
Are we secure if we are disconnected from the
Internet entirely?

5. When Are We Secure?
From a certain point of view, all of these questions
can be answered with a “NO”

6. Confidentiality, Integrity, and Availability Triad
When we discuss security issues, it is often helpful to
have a model that we can use as a foundation or a
baseline. This model is Confidentiality, Integrity, and
Availability (CIA) triad model.

7. Confidentiality, Integrity, and Availability Triad

8. CISO
Chief Information Security Officer (CISO) is the
senior-level executive within
an organization responsible for establishing and
maintaining the enterprise vision, strategy and
program to ensure information assets are adequately
protected.

9. Certifications related to Information Security
1) CISSP - The Certified ISS Professional
2) CISM - Certified Information Security Manager
3) CSSLP - Certified Secure Software Lifecycle
Professional
4) SSCP - Systems Security Certified Practitioner
5) ISSAP – ISS Architecture Professional
6) ISSEP - ISS Engineering Professional
7) ISSMP - ISS Management Professional

10. CISSP
•The CISSP is known as the "gold standard" of
security certifications.
•It is governed by the International ISS Certification
Consortium or (ISC)2.

11. (ISC)2
The International Information Systems Security
Certification Consortium, also known as(ISC)2, is a
global, not-for-profit leader in educating and
certifying information security professionals.

12. At last

14. Şamil Mehdiyev
Thank you for attention 