Earning Criteria

• Must be an employee of IBM
• Provided evidence that the badge earner understands the control principles required to be assured of data confidentiality, integrity and availability and has knowledge of basic security governance principles such as security, risk, compliance, law and regulations.
• Demonstrated that badge earner has advised their clients on the security requirements for network components and communication channels.
• Provided examples that show the badge earner has designed and perform security testing and analysed the results. THey are familiar with the tools and techniques that are used to assess the security of systems and find vulnerabilities, errors in coding or design, weaknesses and possible areas of concerns that have not been corrected by policies and procedures.
• Demonstrated that the badge earner has provided advice on the access and identity provisioning lifecycle and the business processes and technology required for managing and using digital identities.
• Given evidence of the badge earner's practical experience in some aspect of the security management business such as performing root-cause analysis, incident management and response or implementing compliance processes or policies.
• The badge application must be approved by the Subject Matter Expert who conducted the review