Information Assurance Analysts

High School

Classes in computer science [specifically in database management, programming, Microsoft PowerPoint and other Office applications, and computer security (if available)], will provide a good introduction to information technology. History, science, mathematics, social studies, psychology, and philosophy courses will help develop your analytical and critical-thinking skills. Finally, speech and English classes will help you to become a strong communicator.

Postsecondary Education

You’ll need a minimum of a bachelor’s degree in computer and data security, computer science, management information systems, computer engineering, or a related information technology field to become an information assurance analyst. Students in baccalaureate programs should take as many classes in information assurance and information security as possible, as well as participate in internships at government agencies, technology companies, risk management consulting firms, and other organizations that employ analysts.

The most-qualified job candidates have a master’s degree in information assurance. Typical courses include:

• Foundations of Information Assurance
• Distributed System and Network Security
• Software Assurance
• Computer and Network Forensics
• Host-Based Vulnerability Discovery
• Network-Based Vulnerability Discovery
• Security of Embedded Systems
• Secure Web Development
• Secure Mobile Development
• Advanced Computer Forensics
• Business Continuity and Disaster Recovery
• E-Commerce Security
• Computer Security Management
• Information Warfare and Security
• Information Security Policy and Ethics
• Security Risk Analysis & Management

Schools that offer master’s degrees in information assurance include Pennsylvania State University, University of Maryland, University of Nebraska at Omaha, Embry-Riddle Aeronautical University, and Carnegie Mellon University.

Some information assurance analysts receive their training during military service.

Certification

Many colleges and universities offer certificates in information assurance and computer security. Contact schools in your area to learn about available programs.

The CERT Division offers certificates in a variety of areas, including:

• CERT Certificate in Digital Forensics
• Cybersecurity Engineering and Software Assurance Professional Certificate
• Incident Response Process Professional Certificate
• Chief Information Security Officer Certificate
• Insider Threat Program Manager Certificate
• Chief Risk Officer Certificate
• CERT Applied Data Science for Cybersecurity Professional Certificate
• CERT Secure Coding in C and C++ Professional Certificate
• CERT Secure Coding in Java Professional Certificate

Other Education or Training

Professional development opportunities are provided by associations, IT companies (such as IBM and Cisco), and for-profit and nonprofit schools (such as Coursera, edX, Global Knowledge Training LLC, and Udacity). For example, ISACA (a nonprofit, organization for information assurance and security, risk management, and governance professionals) offers online courses such as Penetration Testing, ISACA Cybersecurity: Vulnerability, Identification & Analysis, and ISACA Cybersecurity: Digital Forensics. The IEEE Computer Society offers online courses on cybersecurity, cloud computing, project management, and other topics. The Association for Computing Machinery, CompTIA, Global Association of Risk Professionals, Information Systems Security Association, (ISC)², RIMS—The Risk Management Society, RMA-The Risk Management Association, SANS Institute, and the Storage Networking Industry Association also offer continuing education opportunities. Contact these organizations for more information.