This national standard specifies minimum core requirements for the entry-level qualifications of cybersecurity professionals, including those working in IT security, information security that involves digital artifacts, and digital security. While elements of physical, personnel and project and contract security are included, details that hinge on specific technologies or techniques are outside the scope of this standard.
It applies to professionals in all sectors, including public and private companies, government entities, and not-for-profit organizations.




