A GUIDE TO CYBER SECURITY CAREER DEVELOPMENT DIGITAL WORLD SHAPE IT Looking to upskill your knowledge and climb up the Cyber Security ladder? Confused by the industry certifications landscape and trying to decide which one is right for you? Check out our handy guide to Cyber Security Professional Certifications currently available in Scotland (as of June 2019)

Cyber Cyber Cyber Cyber Cyber Cyber Security Cyber Cyber Forensic Security and Security Security Security Security Security Project Security Security DevSecOps Computer Incident Penetration Risk Compliance Security Analyst Architect Engineer Instructor Manager Manager Researcher Technician Developer Analyst Responder Tester Adviser Auditor Consultant

• CASP+ • CASP+ • CASP+ • CASP+ • EC-Council • CASP+ • CREST Certified • CASP+ • (ISC)2 CISSP • GCTI • CREST Certified • CREST Certified • CASP+ • (ISC)2 CISSP • (ISC)2 CISSP • CREST • CCIE Security • CCIE Security • (ISC)2 CISSP CCISO • (ISC)2 CISSP Malware Reverse • (ISC)2 CISSP • GNFA Network Simulated Attack • ISACA CISA • ISACA CISA • ISACA CISA EXPERT Certified Threat • (ISC)2 CISSP • (ISC)2 CISSP • ISACA CISA • (ISC)2 CISSP Engineer Intrusion Analyst Manager • ISACA CISM • ISACA CISM (5+ YEARS’ Intelligence • ISACA CISM • ISACA CGEIT • (ISC)2 CISSP • CREST Certified EXPERIENCE) Manager • ISACA CISM • GCTI Incident • (ISC)2 CISSP Manager

• CREST • CREST • CCNP Enterprise • CCNP Security • GSLC • GCPM • GREM • CCNP Enterprise • (ISC)2 CSSLP • GASF • CREST • CREST Certified • ISACA CRISC • GCCC • CCNP Security Registered Registered • PMI PMP • PMI PMP • (ISC)2 CSSLP Registered Infrastructure • ISO 27001 • ISACA CRISC ADVANCED Threat Technical Intrusion Analyst Tester Auditor (3-5 YEARS’ Intelligence Security • CREST Certified EX-PERIENCE) Analyst Architect Simulated Attack • CCNP Security Specialist • ISACA CRISC

• CompTIA CySA+ • AWS Associate – • AWS Associate – • CBCI • PRINCE2 • PRINCE2 • AWS Associate – • AWS Associate • GSSP • GCFA • CertNexus CFR • CompTIA • CBCI • Cloud Security • CBCI • CREST Solutions Solutions • CompTIA CySA+ Practitioner Practitioner Solutions – SysOps • Scrum Alliance • CREST PenTest+ • GDPR Alliance CCSK • CompTIA CySA+ Practitioner Architect Architect • CompTIA • CompTIA • CompTIA Architect Administrator CSM Practitioner • CREST Practitioner • GDPR • CompTIA Threat • Microsoft Azure • Microsoft Azure PenTest+ Cloud+ Cloud+ • MCSA • MCSA Intrusion Analyst Registered • ISO 27001 Practitioner PenTest+ INTERMEDIATE Intelligence Administrator Administrator • Cloud Security • GCIA Penetration Practitioner • ISO 27001 • PRINCE2 (2-3 YEARS’ Analyst Associate Associate Alliance CCSK Tester Practitioner Practitioner EXPERIENCE) • Splunk Core • PRINCE2 • OSCP • AWS Associate Certified Power Practitioner – Solutions User Architect

• CCNA Cyber • CCNA • CCNA • CCNA • CompTIA • CompTIA • CompTIA + • CompTIA • CompTIA Linux+ • CompTIA • CompTIA • CompTIA • BCS CISMP • CompTIA • CCNA Ops • CompTIA • CompTIA • CompTIA Network+ Project+ • CompTIA Network+ • GWEB Security+ Security+ Network+ • CompTIA Security+ • CompTIA • CompTIA Security+ Security+ Security+ • CompTIA • CompTIA Security+ • CompTIA • LPIC-1 • EC-Council CHFI • GCIH • CompTIA Security+ • GSNA Security+ Network+ • CompTIA • CompTIA CTT+ Security+ Security+ • LPIC-1 Security+ • GCFE • (ISC)2 SSCP Security+ • GSEC • (ISC)2 CAP • EC-Council CEH FOUNDATION • CompTIA Server+ • EC-Council CEH • (ISC)2 SSCP • CREST • (ISC)2 CAP • ISO 27001 • GSEC (1-2 YEARS’ Security+ • EC-Council CND • ITIL Foundation • ITIL Foundation Practitioner • ISO 27001 Foundation EXPERIENCE) • GSEC Security Analyst Foundation • Splunk Core • EC-Council CEH Certified User • CompTIA Linux+ • LPIC-1

EXPERIENCE LEVEL APM Group CompTIA GIAC Microsoft

FOUNDATION FOUNDATION FOUNDATION INTERMEDIATE • ISO 27001 Foundation • CTT+: Certified Technical Trainer • GCFE: GIAC Certified Forensics Examiner • Microsoft Azure Administrator Associate • Linux+ • GCIH: GIAC Certified Incident Handler • MCSA: Microsoft Certified Solutions Associate INTERMEDIATE • Network+ • GSNA: GIAC Systems and Network Auditors • GDPR Practitioner • Project+ • GSEC: GIAC Security Essentials Certification • ISO 27001 Practitioner Offensive Security • Security+ • GWEB: GIAC Certified Web Application Defender ADVANCED • Server+ INTERMEDIATE INTERMEDIATE • ISO 27001 Auditor • OSCP: Offensive Security Certified Professional INTERMEDIATE • GCFA: GIAC Certified Forensic Analyst • Cloud+ • GCIA: GIAC Certified Intrusion Analyst Amazon Web Services • CySA+: Cyber Security Analyst • GSSP: GIAC Secure Software Programmer PMI • PenTest+: Penetration Tester INTERMEDIATE ADVANCED ADVANCED • AWS Associate – Solutions Architect EXPERT • GASF: GIAC Advanced Smartphone Forensics • PMP: Project Management Professional • AWS Associate – SysOps Administrator • CASP+: CompTIA Advanced Security Practitioner • GCCC: GIAC Critical Controls Certification • GCPM: GIAC Certified Project Manager Certification Scrum Alliance Axelos Cloud Security Alliance • GSLC: GIAC Security Leadership • GREM: GIAC Reverse Engineering Malware INTERMEDIATE FOUNDATION INTERMEDIATE • CSM: Certified ScrumMaster EXPERT • ITIL Foundation • CCSK: Certificate of Cloud Security Knowledge • GCTI: GIAC Cyber Threat Intelligence INTERMEDIATE • GNFA: GIAC Network Forensic Analyst Splunk • PRINCE2 Practitioner CREST FOUNDATION FOUNDATION ISACA • Splunk Core Certified User Business Continuity Institute (BCI) • Practitioner Security Analyst ADVANCED INTERMEDIATE INTERMEDIATE INTERMEDIATE • CRISC: Certified in Risk and Information Systems • Splunk Core Certified Power User • CBCI: Certificate of the Business Continuity Institute • Practitioner Threat Intelligence Analyst Control

• Practitioner Intrusion Analyst EXPERT British Computer Society (BCS) • Registered Penetration Tester • CGEIT: Certified in the Governance of Enterprise IT ADVANCED • CISA: Certified Information Systems Auditor FOUNDATION • Registered Threat Intelligence Analyst • CISM: Certified Information Security Manager • CISMP: Certificate of Information Security Management Principles • Registered Technical Security Architect • Registered Intrusion Analyst (ISC)2 • Certified Infrastructure Tester Cisco Systems • Certified Simulated Attack Specialist FOUNDATION • CAP: Security Assessment and Authorisation FOUNDATION EXPERT Certification • CCNA: Cisco Certified Network Associate • Certified Threat Intelligence Manager • SSCP: Systems Security Certified Practitioner • CCNA Cyber Ops: Cisco Certified Network Associate • Certified Malware Reverse Engineer Cyber Operations ADVANCED • Certified Network Intrusion Analyst • CSSLP: Certified Secure Software Lifecycle ADVANCED • Certified Incident Manager Professional • CCNP Enterprise: Cisco Certified Network • Certified Simulated Attack Manager Professional Enterprise EXPERT • CCNP Security: Cisco Certified Network • CISSP: Certified Information Systems Security Professional Security EC-Council Professional

EXPERT FOUNDATION • CCIE Security: Cisco Certified Internetwork • CEH: Linux Professional Institute Expert Security • CHFI: Computer Hacking Forensics Investigator FOUNDATION • CND: Certified Network Defender • LPIC-1: Systems Administrator CertNexus EXPERT INTERMEDIATE • CCISO: Certified Chief Information Security Officer • CFR: CyberSec First Responder