RSM - Singapore

Qualification vs Certification Yesterday, I attended an event organised by ISACA Singapore Chapter and ISC2 Singapore Chapter on “Cyber Credentials that count.” Although I hold certifications from both associations, I was representing the ISC2 Singapore Chapter. I have held my CISSP since 2002, followed by CISM, CRISC, and CDPSE, as well as ISO 27001, CBCP, and other certifications. After completing my tertiary education, professional certifications became the next step in upgrading my skills and capabilities. Today, however, certifications are no longer just about enhancing knowledge, they are also about being part of a broader ecosystem and networking with like-minded cybersecurity professionals. From a service provider’s perspective, clients are placing increasing demands on us to ensure that our teams are both capable and professional. RFPs and RFQs now commonly require service providers to demonstrate a certain level of cybersecurity governance. This is where frameworks and certifications such as Cyber Essentials, Trustmark (SS 712), ISO 27001, ISO 27701, DPTM (SS 714), and OSPAR become increasingly important. Today, I was invited by a friend to share the importance of attaining the right cybersecurity credentials and certifications to meet client expectations. These governance certifications not only demonstrate our commitment to strong cybersecurity practices, but also reflect our responsibility to protect client data, especially when handling their customers’ information. Ultimately, certification is no longer optional, it is a necessity to demonstrate compliance and build trust. Ultimately demonstrating cyber compliance should be a business enabler rather than cost.