1. www.pecb.org The Value of Certification

2. 2 Oftentimes people wonder whether it is worth getting certified or not. They also wonder if pursuing and enhancing their careers in any field will benefit by earning a certification. Not only specific-field professionals are the ones who may benefit from earning a certification; companies and businesses consider certification mattering much. Their prosperity depends, to an extent, upon the quality and professionalism of its people. And over the years it has been proven that, besides undergraduate and post-graduate acquirements, relevant professional certifications are a great way to show a level of expertise and commitment to the field. Businesses of any sector, apart from their reputation and top quality staff they have recruited based on their qualification and strong, professional background, may lack specialized training, which at a point matches the company's business needs and market expectations. Companies often consider certifying recruiters too. It is true that they may not possess enough expertise to perform every job requirement, but specialized training and certification (e.g. IT certification) will provide them with a great competence to represent and perform their duties superfine. The Value of Certification 3. To judge by the great need and the importance of having IT professionals in companies, it is undoubtedly required to demonstrate more than technology-related management skills. The world of IT professionals is closely related to business, technology, and of course people. IT professionals becoming certified will upgrade themselves to higher positions, and greater appreciation and recognition amongst professional environments. For example, the ISO/IEC 27001 Foundation certification is a professional certification for professionals needing to have an overall understanding of the ISO 27001 standard and its requirements. The principal competencies and knowledge skills needed by the market will provide them with the ability to support an organization in managing an Information Security Management System. Or the "Certified ISO 27005 Risk Manager" credential is a professional certification for professionals needing to demonstrate the competence to implement, maintain and manage an ongoing information security risk management program according to ISO 27005. The principal competencies and knowledge skills needed by the market are the ability to support an organization in implementing and managing an risk management framework as specified in ISO 27005:2011 implementation of a risk management program, risk identification, risk analysis, risk evaluation, risk treatment, acceptance of risk, management of residual risks, communicating, monitoring and reviewing risk. Various professionals may apply for this certification, such as: Risk managers, persons responsible for information security, members of the information security team, IT consultants, and staff implementing or seeking to comply with ISO 27001 or involved in a risk management program. Certification is a vital component of any field as it provides evidence that certified professionals hold standardized competencies based on best practices. Certification can also serve as documented evidence of a professionals qualifications, competencies and experience. The benefits of the Certification Program include the following: It serves to demonstrate that the certified professional holds defined competencies based on best practices. It allows employing organizations to make an informed selection of employees or services based on the competencies that are represented by the certification designation. It provides incentives to the professional to constantly improve his/her skills and knowledge. It serves as a tool for employers to ensure that training has been effective. 3 Credibility on the market and recognition by peers is the true value of PECB certification.