FREQUENTLY ASKED QUESTIONS

In 2010, the Association of Information Security Professionals (AiSP) launched the Qualified Information Security Professional (QISP®) training programme.

The objectives of the programme are to raise the professional proficiency of information security practitioners in Singapore through training and qualification, and to build a critical pool of competent personnel in Singapore to handle, contain and manage cyber security threats.

The QISP® programme supports then-IDA’s second Infocomm Security Masterplan (MP2) to build Singapore’s security preparedness and competencies in cyber security.
Every information security professional in Singapore or any person wishing to be trained in information security and has met the criteria should aim for the QISP qualification.

QISP training will equip participating professionals with broad information security knowledge and in-depth skills to handle, contain and manage cyber security threats. QISP qualification will ensure information security practitioners in Singapore are qualified for their job roles and they are recognised for their professional standards.
QISP professionals will be equipped with international best practices in information security as well as knowledge of Singapore-specific infocomm security laws and regulations. They will be confident to perform their information security roles competently in Singapore organizations, as well as in the larger international environment.

In addition, QISP® professionals will also qualify for Associate membership with the Association of Information Security Professionals (AiSP) (complimentary for 12 months) which will provide them further opportunity for education and skills upgrading in the information security profession.

AiSP is a professional body supported by the Cyber Security Agency of Singapore (CSA), Info-communications Media Development Authority (IMDA), and Government Technology Agency (GovTech). It aims to transform information security into a distinguished profession with qualification standards and career development programmes.
The QISP programme serves to raise the professional proficiency of information security practitioners in Singapore. We aim to establish a track record in raising professional proficiency and building a pool of qualified professionals. The QISP® training based on BOK 2.0 will be more in line with cybersecurity developments in Singapore and the region. QISP-certified professionals will benefit from holistic training that covers various skills sets required in information security practice and that includes international best practices in information security. QISP® learners will be qualified to perform their information security roles competently, in Singapore and in the international environment.
The Qualified Information Security Professional (QISP®) course based on BOK 1.0 is jointly developed by AiSP and the Institute of Systems Science, the premier IT training institute in Singapore. The last QISP® based on BOK 1.0 was conducted in August 2020

The QISP® training based on BOK 2.0 will be conducted by Wissen International.
Training may not require if your information security knowledge is kept current. Please refer to our link on the examination topics for you to assess if you need training and if you have prior background in information security,
  • One to five years of working experience in information security; or,
  • Formal training in cyber security in an educational institute; or,
  • Professional certification in information security, please refer to this link for details.
If you wish to refresh your knowledge through the training, the training would help to prepare you for the QISP® exam.

The QISP® is intended to be a complementary or additional training and qualification programme for information security professionals in Singapore. It is not a direct alternative for other training certificates. The QISP® training includes Singapore security-related laws and regulation so that learners will be equipped to handle cyber security issues in the Singapore environment.

QISP® professionals have another important advantage. QISP-certified professionals with at least one year of relevant working experience can qualify for AiSP membership which will provide them further opportunity for education and skills upgrading in the security profession.

AiSP aims to transform information security into a distinguished profession with a recognised professional body, qualifications, established career paths and career development programmes. AiSP members will have access to a community of information security professionals providing formal and informal opportunities for interaction and knowledge exchange. As such, QISP® certification is for life and does not require learners to submit Continuing Professional Education (CPE) hours to maintain their certification validity.
Our training partners are working on the funding application for the training component where learners may be eligible for support.

The 2-hour QISP® examination would be conducted online by AiSP. Register here.
The QISP® training offers current and relevant content, including Governance and Management, Physical Security and Business Continuity, Security Architecture and Engineering, Operation and Infrastructure Security and Software Security, as well as Cyber Defence.

BOK 2.0 covers 22 core topics across six core domains in information security. To ensure its coverage is appropriate for Singapore’s cybersecurity ecosystem, BOK 2.0 has taken reference from the current Skills Framework for Infocomm Technology by IMDA on cybersecurity topics. Given the speed of developments in information security, AiSP endeavours to review, maintain and update its BOK regularly for wider geographical coverage and technological advancements in the future.