Press Releases | Linux Foundation

Linux Foundation, ISC2 and OpenSSF Collaborate to Target Secure Code Development

Written by The Linux Foundation | Nov 2, 2023 2:00:00 PM

Collaboration Announced to Expand the Depth and Reach of Cybersecurity Training & Certifications.

SAN FRANCISCO – NOVEMBER 2, 2023 – Linux Foundation Training & Certification, ISC2, and Open Source Security Foundation (OpenSSF) today announced a new collaboration to empower the open source cybersecurity community through secure software development, knowledge sharing, education, certification and much more. Together, the three organizations will lead the way to secure software development and lifecycle management for open source code.

The collaboration will initially focus on helping software development professionals around the world build code that ensures strong cybersecurity is a key component of the code’s design and execution. The existing training and certification resources of the organizations, including ISC2’s globally recognized Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP) and Certified in Cybersecurity (CC) certifications as well as the Linux Foundation’s IT Professional Program for Cloud Engineers and Certified Kubernetes Security Specialist (CKS), will be used in their respective programs to provide a blend of open source compliance and cybersecurity training along with best practices.

Additional planned initiatives include:

  • Developing new, roles-based learning programs that include courses, certifications and reality-based practice labs. The initial area of focus will be on developing secure microservices.
  • Providing an authoritative voice on cybersecurity regulations, requirements and best practices, with an emphasis on secure collaborative software development.
  • Producing relevant research tools for the industry to better identify needs and track the effect of cybersecurity initiatives.

The impact of open source code as it relates to cybersecurity cannot be overlooked. It fuels innovation worldwide and is estimated to be in use at 90 percent of commercial organizations, enabling companies and consumers to thrive in countless ways.

“Despite the accelerating cyber risks, too little attention and too few resources are devoted to cybersecurity,” said Clyde Seepersad, SVP, General Manager, Training & Certification, Linux Foundation. “By aligning the resources and objectives of our collective organizations we hope to increase our overall impact on cybersecurity for the betterment of all.”

“With organizations and consumers under constant threat, the collaboration between the world’s largest open source software foundation and the world’s largest cyber security professional association will prove to be a powerful force in securing a safe future for all,” said ISC2 CEO Clar Rosso, CC. “Secure open source code is critical, as it is the bedrock of so much innovation around the globe. Together with the Linux Foundation, ISC2 is dedicated to ensuring developers have access to the education and training they need to deliver more secure and resilient solutions.”

“Education is one of the best ways to ensure that open source software is secure by construction,” said Omkhar Arasaratnam, GM, OpenSSF. “Our partnership with ISC2 will help to improve access to quality security education for everyone.”

Why now? First, many organizations, governments, and individuals rely on the tremendous output of these communities to ensure code is secure and trustworthy. Second, the burden of security globally – through regulation and policy – is shifting from consumers to developers. The companies, organizations and individual IT professional contributors who develop solutions using open source code need the necessary security expertise to embed best practices throughout every stage of the software development process.

 

# # #

 

About the Linux Foundation
The Linux Foundation is the world’s leading home for collaboration on open source software, hardware, standards, and data. Linux Foundation projects, including Linux, Kubernetes, Node.js, ONAP, PyTorch, RISC-V, SPDX, OpenChain, and more, are critical to the world’s infrastructure. The Linux Foundation focuses on leveraging best practices and addressing the needs of contributors, users, and solution providers to create sustainable models for open collaboration. For more information, please visit us at linuxfoundation.org. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see its trademark usage page: www.linuxfoundation.org/trademark-usage. Linux is a registered trademark of Linus Torvalds.

 

About ISC2
ISC2 is the world’s leading member organization for cybersecurity professionals, driven by our vision of a safe and secure cyber world. Our more than 500,000 members, candidates and associates around the globe are a force for good, safeguarding the way we live. Our award-winning certifications – including cybersecurity’s premier certification, the CISSP® – enable professionals to demonstrate their knowledge, skills and abilities at every stage of their careers. ISC2 strengthens the influence, diversity and vitality of the cybersecurity profession through advocacy, expertise and workforce empowerment that accelerates cyber safety and security in an interconnected world. Our charitable foundation, The Center for Cyber Safety and Education, helps create more access to cyber careers and educate those most vulnerable. Learn more and get involved at ISC2.org. Connect with us on X, Facebook and LinkedIn.

 

About the OpenSSF
The Open Source Security Foundation (OpenSSF) is a cross-industry initiative by the Linux Foundation that brings together the industry’s most important open source security initiatives and the individuals and companies that support them. The OpenSSF is committed to collaboration and working both upstream and with existing communities to advance open source security for all. For more information, please visit us at openssf.org.

 

Media Contacts:

Scott Punk

Linux Foundation Training & Certification

jspunk@linuxfoundation.org

 

Amanda Steinman

ISC2

asteinman@isc2.org

 

Jennifer Bly

OpenSSF

jbly@linuxfoundation.org