CISSPforum replacement

[rslade]

The long running CISSPforum mailing list on Yahoo Groups is being closed by ISC2, effective June 15, 2018.  An alternate mailing list, run by volunteer CISSPs, has been created on groups.io.  In order to join, you must both:
1)  Send a message to cisspforum+subscribe@groups.io from the email address you would like to use on the mailing list or apply at https://groups.io/g/cisspforum

AND (you must do both: this isn't an option)

2)  Send a message to cisspforum+owner@groups.io from the same email address you would like to use on the mailing list and include, in the body, your last name (as known to ISC2) (your first name is optional) and your certification number.

The moderators use the site

https://www.isc2.org/MemberVerification to verify your certification.  Due to various cultural naming factors, you may wish to verify yourself, and what name(s) you are known by to ISC2, and then send the URL in the form (for example)

https://webportal.isc2.org/custom/CertificationVerificationResults.aspx?FN=&LN=slade&CN=23670 in order to ensure that it is correct and verified.  (Please do not send in Rob Slade's verification and expect to be verified yourself.)  (Yeah, really.)  [Of course, that link no longer works due to the fact that a) it is based on the old verification site, and b) Rob Slade's certificate has been suspended.]

(I notice that a discussion of this issue has been started on the "community" under the title "Why cancel the active cisspforum Yahoo Group that has existed for years?"  ...)

(And for those saying this is GDPR's fault, let me note that, since you can access all of these "community" postings from Google, it is far less secure and confidential than was the Yahoo forum ...)

[Baechle]

Dain,

I understand the sentiment of being a stakeholder. 

But are you a shareholder?

Being a customer of the service, and a member of the (ISC)^2 professional organization doesn't give us rights to make business decisions on behalf of the company.  Nor does it entitle us to the details of every business decision, legal or regulatory requirement, or even the financials - which (ISC)^2 generously makes public (as far as I know (ISC)^2 isn't even a publicly traded company).

There was a comment a while back about how the lawyers have been finding their way into InfoSec leadership roles... there's a reason that has been a thing.  A lot of security folks don't think beyond the ideal, and the "tech".  We live in a world with rules, laws, and regulations.  And like them or not, when they're violated, there are often consequences.

This isn't break-fix, disaster recovery, or incident response.  This is business process re-engineering.  Shortsightedness and narrow technology-focused thinking are what is killing this profession in my opinion.

I don't know what to expect from (ISC)^2 given that they have this Community - but I wouldn't be surprised if the private forums over at groups.io gets hit with a cease and desist letter for usurping the CISSP brand.

[rslade]

---

@@Baechle wrote:

But are you a shareholder?

---

Well, as a matter of fact, yes.

---

"Being a customer of the service, and a member of the (ISC)^2 professional organization doesn't give us rights to make business decisions on behalf of the company.  Nor does it entitle us to the details of every business decision, legal or regulatory requirement, or even the financials - which (ISC)^2 generously makes public (as far as I know (ISC)^2 isn't even a publicly traded company)."

---

True, it isn't publicly traded.  Neither is it a private company.  It's a member organization.  Thus we are all (at least those of us with certs) shareholders.  It's a not-for-profit, so there is no value to the shares, but ISC2 is us.

[Baechle]

Rob,

---

@rslade wrote:

---

---

True, it isn't publicly traded.  Neither is it a private company.  It's a member organization.  Thus we are all (at least those of us with certs) shareholders.  It's a not-for-profit, so there is no value to the shares, but ISC2 is us.

---

Good point.  How about sitting on the Board?

[rslade]

---

@@Baechle wrote:

---

@@@rslad wrote:

---

---

True, it isn't publicly traded.  Neither is it a private company.  It's a member organization.  Thus we are all (at least those of us with certs) shareholders.  It's a not-for-profit, so there is no value to the shares, but ISC2 is us.

---

Good point.  How about sitting on the Board?

---

I could do that.  If anyone asked.

[Baechle]

Rob,

---

@rslade wrote:

---

---

I could do that.  If anyone asked.

---

EDIT: I apologize for my original remarks.  They appeared a little snarky when I reread them.  "How about sitting on the Board?" - I thought I just asked? /EDIT

I don't know if that's how it works.  I thought it was Members with strong personalities deciding that instead of quitting over their frustrations not being listened to, that they decide to stand up and steer the community in the direction they want.

Then you ask us what else we want, and if you have our support during the next election.

Of course it probably requires a lot of marketing through social media... like the LinkedIn group.  So, maybe you're not up for that?

EB

[rslade]

I should note that the CISSPforum FAQ has been updated ...