Have you ever wondered what effect CISSP and CISA certified employees have on the probability of a data breach? Recent analysis has found that the probability for a large data breach can be driven to near-zero by investing in sufficient numbers of CISSP and CISA certified employees. The CISSP and CISA certifications can be viewed as the technical and human sides of cybersecurity, and both certifications are equally important. 

 

We propose investing in equal numbers of employees with both certifications as a more cost effective approach for improving security. We recommend best-practice reporting structures that foster independence for CISA certified employees.