Information Security Legal Certification | GLEG - IT Policy | Audit

03/21/2010

Information Security Legal Certification | GLEG

GIAC | Global Information Assurance Certification

The SANS Institute's law & investigations course series LEGAL-523 is associated with a GIAC cert, called GIAC Legal (GLEG).

Over 600 proud professionals hold or have held this unique certification as of September 2014.

Numerous LinkedIn members, like information assurance professional Joel Baese, list GLEG certification on their profiles.

Credentials for Investigators

Increasingly, as more evidence of human activity is captured digitally, infosec professionals are expected to conduct investigations. "Investigator" is becoming a key part of their job description. The LEGAL-523 course series (supported by the GLEG) teaches these professionals the skill set to execute competent, defensible investigations.

You don’t know how important something is until you are about to lose it. Late 2009 GIAC decided to discontinue the GLEG for economic reasons. But that caused an uproar when I taught the LEGAL 523 course in December. Fortunately GIAC reconsidered and changed its mind. When we delivered LEGAL 523 in March 2010, a record-setting number of students (~15) signed up to take the GLEG, which was a pleasant surprise to GIAC!

The law of information security and cyberforensic investigations is challenging . . . and developing rapidly. Many employers want their professionals to possess training on the topic, and the GLEG confirms that training. It shows that a student did more than register for a class; it shows the student studied and mastered the material. Also, some LEG523 students say they want the certification because it enhances their credibility as expert (forensic or otherwise) witnesses in a courtroom or in an investigation.

GIAC as World Leader

I’d be happy to hear comments and answer questions about the GLEG certification or GIAC in general. GIAC offers certification in many fields of IT security, e.g., Windows security GCWN.

News: SANS Masters Degrees in cybersecurity are now accredited.

By: Benjamin Wright, Senior SANS Instructor who developed and teaches LEGAL 523: The Law of Data Security and Investigations. See comments about the SANS Legal 523 course.

Postscript: A topic of growing impact in the Legal 523 course is ethics for IT security and forensics professionals.

Update 2014 on SANS Institute's Legal 523 course.

Posted at 01:33 PM in cyberforensics, information assurance, investigator, SANS Institute | Permalink

Tags: SANS Institute

Comments

You can follow this conversation by subscribing to the comment feed for this post.

Verify your Comment

Previewing your Comment

Posted by: |

This is only a preview. Your comment has not yet been posted.

Your comment could not be posted. Error type:

Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Post a comment

Comments are moderated, and will not appear until the author has approved them.

Your Information

(Name is required. Email address will not be displayed with the comment.)

Name is required to post a comment

Please enter a valid email address

Invalid URL

Blogger

Attorney Benjamin Wright is the author of technology law books, including The Law of Electronic Commerce (Aspen Publishers) and Business Law and Computer Security (SANS). A featured speaker at industry conferences and professional meetings, Wright teaches e-discovery, data security and cyber investigations law at the SANS Institute. Mr. Wright advises clients on digital law and forensic investigations. He helps tech professional firms write engagement contracts, and otherwise manage their legal liability and right to be paid. Such firms include QSAs, auditors, blockchain analysts, penetration testers and forensic investigators. His telephone is 1.214.403.6642. Wright's e-mail is ben_wright at compuserve dot com (put "BLOG" in subject line to distinguish yourself from spam). Mr. Wright graduated from Georgetown University Law Center 1984.

Important!

No public statement by Mr. Wright (blog, comment, book, article, video, speech, tweet) is legal advice for any particular situation. If you need legal advice, you should consult your lawyer.
The purpose of this blog -- and the purpose of all of Mr. Wright's public statements -- are public education and discussion, and not the delivery of legal, technical or other professional advice. If you need advice or complete information, this blog is not the place to get it. Mr. Wright's public statements are offered as-is, with no warranty of accuracy or reliability. Mr. Wright sometimes revises his published ideas. If you use the ideas, you do so at your own risk.
Mr. Wright's public statements on blogs and the like are not intended to advertise or solicit legal services.
Mr. Wright's contributions to blogs, web courses and the like constitute part of the online update service for the book The Law of Electronic Commerce. Originally released 1991, and revised continually since then, the book is a reference for lawyers, published by Wolters Kluwer Law.
The only person responsible for Mr. Wright's words is Mr. Wright.
Mr. Wright has received money from some organizations he mentions online, such as Netmail/Messaging Architects, SANS Institute and LabMD.
Mr. Wright strives to comply with all applicable laws. He does not have and never has had intention to infringe the rights of anyone. If any person has any information, suspicion or belief that Mr. Wright has done anything illegal or unethical, he asks that person promptly to notify him at 1.214.403.6642, Dallas, TX. Also, please state publicly on Mr. Wright's blogs or pages that he is wrong. Promptness helps mitigate damage.
Any person accessing this blog agrees not to use data from it (or from any other public activity or statement by Mr. Wright) in a way that is adverse to Mr. Wright's interests.
Mr. Wright does not have an attorney-client relationship with any person unless and until he and that person explicitly so agree. Interaction with Mr. Wright through public media does not create an attorney-client relationship. Exchanging private messages with Mr. Wright does not, by itself, form an attorney-client relationship.
Privacy/Security Vision: Some people provide Mr. Wright private information. Mr. Wright strives to treat such information reasonably according to the circumstances. People should have no more than reasonable expectations about information security. It is unreasonable to expect that the offices, computers, cell phones, brief cases, filing cabinets and online or other services used by Mr. Wright are very secure.

Become a Fan

IT Policy | Audit | Investigate Cyber Crime

Liability | Lawsuits | Strategy

03/21/2010