Information Systems Security Association (ISSA) is a not-for-profit, international professional organization of
information security
Information security, sometimes shortened to InfoSec, is the practice of protecting information by mitigating information risks. It is part of information risk management. It typically involves preventing or reducing the probability of unauthorize ...
professionals and practitioners. It was founded in 1984, after work on its establishment started in 1982. ISSA promotes the sharing of information security management practices through educational forums, publications and networking opportunities among security professionals.
ISSA members and award winners include many of the industry’s notable luminaries and represents a wide range of industries – from communications, education, healthcare, manufacturing, financial and consulting to IT as well as federal, state and local government departments and agencies.
The association publishes the ''ISSA Journal'', a peer-reviewed publication on the issues and trends of the industry. It also partners with ESG (Enterprise Strategy Group) to release a yearly research report, "The Life and Times of the Cyber Security Professional", to examine the experiences of cybersecurity professionals as they navigate the modern threat landscape and the effects it has on their careers.
Organization
Information Systems Security Association has a board of directors that are elected annually by its members and a set of committees that are appointed. The headquarters of ISSA is located in Vienna, Virginia.
ISSA International Board of Directors Executive Officers
President:
Candy Alexander, CISSP, CISM
Vice President:
Deb Peinert, CISSP-ISSMP
Secretary/Director of Operations:
Dr. Shawn Murray, Ph.D., C, ISO, CISSP, CRISC, FITSP-A, C, EI
Treasurer/Chief Financial Officer:
Pamela Fusco, CISSP
Membership
ISSA has an international membership base.
Goals
The primary goal of the ISSA is to promote management practices that will ensure the confidentiality, integrity and availability of information resources. The ISSA facilitates interaction and education to create a more successful environment for global information systems security and for the professionals involved.
ISSA's goals are to promote security education and skills development, encourage free information exchanges, communicate current events within the security industry and help express the importance of security controls to enterprise business management.
Code of ethics
As an applicant for membership, the individual is expected to be bounded to a principle of ethics related to the Information Security career.
Applicants for ISSA membership attest that they have and will:
* Perform all professional activities and duties in accordance with all applicable laws and the highest ethical principles;
* Promote generally accepted information security current best practices and standards;
* Maintain appropriate confidentiality of proprietary or otherwise sensitive information encountered in the course of professional activities;
* Discharge professional responsibilities with diligence and honesty;
* Refrain from any activities which might constitute a conflict of interest or otherwise damage the reputation of employers, the information security profession, or the Association; and
* Not intentionally injure or impugn the professional reputation or practice of colleagues, clients, or employers.
International presence
ISSA is present in more than one hundred countries, including Europe and Asia, with more than 10,000 members.
See also
*
ISACA
ISACA is an international professional association focused on IT (information technology) governance. On its IRS filings, it is known as the Information Systems Audit and Control Association, although ISACA now goes by its acronym only.
*
Business network
A business network is a complex network of companies, working together to accomplish certain objectives. These objectives, which are strategic and operational, are adopted by business networks based on their role in the market. There are two categ ...
*
Computer security
Computer security, cybersecurity (cyber security), or information technology security (IT security) is the protection of computer systems and networks from attack by malicious actors that may result in unauthorized information disclosure, the ...
*
Information Security
Information security, sometimes shortened to InfoSec, is the practice of protecting information by mitigating information risks. It is part of information risk management. It typically involves preventing or reducing the probability of unauthorize ...
*
Information security management system Information security management (ISM) defines and manages controls that an organization needs to implement to ensure that it is sensibly protecting the confidentiality, availability, and integrity of assets from threats and vulnerabilities. The core ...
*
IT risk
Information technology risk, IT risk, IT-related risk, or cyber risk is any risk related to information technology. While information has long been appreciated as a valuable and important asset, the rise of the knowledge economy and the Digital Re ...
References
{{reflist
Information systems
Data security
Computer security organizations