Information Assurance (IA) involves “setting high level strategy and policy to ensure stakeholder confidence that risk to the integrity of information in storage and transit is managed pragmatically, appropriately and in a cost effective manner”. (Source: Skills Framework for the Information Age v5, 2011)
Information Assurance therefore embraces Information Security, Information Risk Management and Business Continuity Management: fields which, in turn, provide a strong business context for practical, technical IT security skills.
Professional certification in these fields are available from a range of UK and international bodies, providing both technical and management credentials. The US Department of Defense has created an Information Assurance skills framework, Directive 8570.1, which includes many of the certifications listed below. US defence contractors are required to hold the necessary DoD 8570.1 certifications, aligned to their role.
In the UK, management credentials are offered by the BCS (ISEB), while technical credentials are available from international industry bodies and major IT vendors.