Match the training to the person: awareness for all staff, fundamentals for people entering security, and advanced certifications for experienced professionals. Certifications such as CISSP and CISM require years of experience, so they are not a starting point.
For all staff: security awareness
Everyone with a work email needs to recognize phishing, handle data carefully and report problems. See Cybersecurity Awareness for Employees.
For career starters and IT staff
[Cybersecurity Fundamentals](/cybersecurity-fundamentals): a grounding in security principles, networks, identity and frameworks.
ISC2 Certified in Cybersecurity (CC): ISC2’s entry-level certification. No work experience is required.
CompTIA Security+: there are no formal prerequisites, but CompTIA recommends about two years of security-focused IT administration experience or equivalent training. See Security+ preparation.
For experienced professionals
ISC2 CISSP: requires at least five years of cumulative, full-time work in two or more of its eight domains. A relevant degree or approved credential can waive one year.
ISACA CISM: for information security management. It requires five years of experience in the field, including three years across three of its four practice areas. Some credentials can earn a waiver.
Requirements change, so confirm the details with ISC2, CompTIA or ISACA before you begin.
How to choose
Look at adverts for the roles you want in Qatar, and note which certifications they name.
Be honest about your current experience.
Build fundamentals first if networks and systems are new to you.
For organizations
Awareness training for staff is often the sensible first step, with deeper training for IT teams. See our IT courses, or ask about training your team.
Sources
- Cybersecurity
- IT
- Corporate training
