Translate

2026年9月2日星期三

台灣數位發展部認可的資安證照

 


資通安全專業證照清單

日期：115年5月22日修正公布

 

序

發證機構(單位)

管理類 (22)

技術類 (84)

1

已簽署國際認證論壇(International Accreditation Forum, IAF)多邊相互承認協議(ISO/IEC 27006範圍)之認證機構(含TAF)所認證之資訊安全管理系統驗證機構、稽核員驗證或註冊之國際專業機構[1]

1. ISO/IEC 27001:2022 Information Security Management System (ISMS) Auditor/Lead Auditor
2. ISO 22301 Business Continuity Management System (BCMS) Auditor/Lead Auditor
3. ISO/IEC 27701:2019 Privacy Information Management System Lead Auditor

※ Lead Auditor 相關證照應具有效性，除提出證照外，尚須提供當年度至少有2次實際參與該證照內容有關之稽核經驗證明

（無）

2

International Information System Security Certification Consortium (ISC2) [2]

1. Certified Information Systems Security Professional (CISSP)
2. Information Systems Security Management Professional (ISSMP)
3. Governance, Risk and Compliance Certification (CGRC)
4. HealthCare Information Security and Privacy Practitioner (HCISPP) (於115年12月1日後停止採認)
5. Information Systems Security Architecture Professional (ISSAP)
6. Information Systems Security Engineering Professional (ISSEP)

1. Systems Security Certified Practitioner (SSCP)
2. Certified Cloud Security Professional (CCSP)
3. Certified Secure Software Lifecycle Professional (CSSLP)

3

The Computing Technology Industry Association (CompTIA) [3]

（無）

1. CompTIA Security+
2. CompTIA Cybersecurity Analyst (CompTIA CySA+)
3. CompTIA SecurityX
4. CompTIA PenTest+

4

CREST [4]

（無）

1. Penetration Testing
  (1) The CREST Practitioner Security Analyst (CPSA)
  (2) The CREST Certified Red Team Specialist (CCRTS)
  (3) The CREST Certified Red Team Manager (CCRTM)
2. Threat Intelligence
  (1) The CREST Registered Threat Intelligence Analyst (CRTIA)
  (2) The CREST Certified Threat Intelligence Manager (CCTIM)
3. Incident Response
  (1) The CREST Practitioner Intrusion Analyst (CPIA)
  (2) The CREST Registered Intrusion Analyst (CRIA)
  (3) The CREST Certified Incident Manager (CCIM)

5

EC-Council [5]

1. Certified Chief Information Security Officer (CCISO)
2. Associate Certified Chief Information Security Officer (Associate CCISO)

1. Certified Network Defender Course (CND)
2. Certified Ethical Hacker (CEH)
3. Certified Ethical Hacker (CEH) Practical
4. CEH (Master)
5. Computer Hacking Forensic Investigator (CHFI)
6. EC-Council Certified Incident Handler (ECIH)
7. EC-Council Disaster Recovery Professional (EDRP)
8. Certified Threat Intelligence Analyst (CTIA)
9. Certified Application Security Engineer (CASE) .NET、JAVA
10. Certified Penetration Testing Professional (CPENTA)
11. Licensed Penetration Tester Master (LPT (Master))
12. Certified SOC Analyst (CSA)

6

Global Information Assurance Certification (GIAC) [6]

1. Management, Legal & Audit
  (1) GIAC Security Leadership (GSLC)
  (2) GIAC Systems and Network Auditor Certification (GSNA) (僅限續證)
  (3) GIAC Law of Data Security & Investigations (GLEG) (僅限續證)
  (4) GIAC Strategic Planning, Policy, and Leadership (GSTRT)
  (5) GIAC Information Security Professional Certification (GISP)
  (6) GIAC Critical Controls Certification (GCCC)

1. Cloud Security
  (1) GIAC Cloud Security Essentials Certification (GCLD)
  (2) GIAC Certified Web Application Defender (GWEB)
  (3) GIAC Cloud Security Automation (GCSA)
  (4) GIAC Public Cloud Security (GPCS)
2. Cyber Defense
  (1) GIAC Open Source Intelligence Certification (GOSI)
  (2) GIAC Certified Intrusion Analyst Certification (GCIA)
  (3) GIAC Certified Windows Security Administrator (GCWN) (僅限續證)
  (4) GIAC Continuous Monitoring Certification (GMON)
  (5) GIAC Defensible Security Architecture Certification (GDSA)
  (6) GIAC Certified Detection Analyst (GCDA)
  (7) GIAC Security Operations Certified (GSOC)
  (8) GIAC Information Security Fundamentals (GISF)
  (9) GIAC Security Essentials (GSEC)
  (10) GIAC Certified Enterprise Defender (GCED)
  (11) GIAC Certified Incident Handler Certification (GCIH)
  (12) GIAC Foundational Cybersecurity Technologies (GFACT)
  (13) GIAC Defending Advanced Threats (GDAT)
  (14) GIAC Python Coder (GPYC)
3. Offensive Operations
  (1) GIAC Enterprise Vulnerability Assessor Certification (GEVA) (僅限續證)
  (2) GIAC Penetration Tester Certification (GPEN)
  (3) GIAC Web Application Penetration Tester (GWAPT)
  (4) GIAC Mobile Device Security Analyst (GMOB)
  (5) GIAC Cloud Penetration Tester (GCPN)
  (6) GIAC Assessing and Auditing Wireless Networks (GAWN)
  (7) GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
4. Digital Forensics and Incident Response
  (1) GIAC Battlefield Forensics & Acquisition (GBFA)
  (2) GIAC Certified Forensic Examiner (GCFE)
  (3) GIAC Advanced Smartphone Forensic Certification (GASF)
  (4) GIAC Certified Forensic Analyst (GCFA)
  (5) GIAC Network Forensic Analyst (GNFA)
  (6) GIAC Cyber Threat Intelligence (GCTI)
  (7) GIAC Reverse Engineering Malware Certification (GREM)
5. Industrial Control Systems
  (1) GIAC Global Industrial Cyber Security Professional Certification (GICSP)
  (2) GIAC Response and Industrial Defense (GRID)
  (3) GIAC Critical Infrastructure Protection Certification (GCIP)
6. Portfolio Certification
  GIAC Security Expert (GSE)

7

Information Systems Audit and Control Association (ISACA) [7]

1. Certified Information Security Manager (CISM)
2. Certified in the Governance of Enterprise IT (CGEIT)
3. Certified Information Systems Auditor (CISA)
4. Certified in Risk and Information Systems Control (CRISC)

（無）

8

The International Society of Forensic Computer Examiners (ISFCE) [8]

（無）

Certified Computer Examiner (CCE)

9

OffSec [9]

（無）

1. OffSec Certified Professional (OSCP)
2. Offensive Security Certified Expert (OSCE)
3. OffSec Wireless Professional (OSWP)
4. OffSec Exploitation Expert (OSEE)
5. OffSec Web Expert (OSWE)
6. OffSec Exploit Developer (OSED)
7. OffSec Experienced Penetration Tester (OSEP)
8. OffSec Certified Expert 3 (OSCE3)
9. OffSec Certified Professional (OSCP+)

10

Cisco [10]

（無）

1. Cisco Certified Network Associate (CCNA)
2. Cisco Certified Cybersecurity Associate (原名稱為Cisco Certified CyberOps Associate，將於117年1月20日後停止採認)

11

經濟部 [11]

（無）

1. iPAS 資訊安全工程師中級能力鑑定

12

International Society of Automation (ISA) [12]

1. ISA/IEC 62443 Cybersecurity Fundamentals Specialist
2. ISA/IEC 62443 Cybersecurity Risk Assessment Specialist

1. ISA/IEC 62443 Cybersecurity Design Specialist
2. ISA/IEC 62443 Cybersecurity Maintenance Specialist
3. ISA/IEC 62443 Cybersecurity Expert

13

Hack The Box (HTB) [13]

（無）

1. HTB Certified Defensive Security Analyst (HTB CDSA)
2. HTB Certified Penetration Testing Specialist (HTB CPTS)

14

The Cyber AB [14]

1. CMMC Certified Professional (CCP)
2. CMMC Certified Assessor (CCA)

（無）

 

備註：

1. 針對發證機構(單位)已停止核發、規劃停止核發或刪除之證照，將提供緩衝配套措施，並於證照項目備註實際停止認可日期，說明如下：
   (1) 已停止核發或刪除之證照，停止認可日期為本清單修正公告後1年。
   (2) 規劃停止核發之證照：於1年後停止核發者，停止認可日期原則參考原廠建議訂定；於1年內停止核發者，停止認可日期為本清單修正公告後1年。
   (3) 以上停止認可日期，得視資通安全專職(責)人員持有人數、證照職能內容等情形，經審定後酌予調整。

2. 本證照清單定期更新，各機關如有新增資通安全專業證照建議，請依數位發展部資通安全署網站公告之「資通安全專業證照認可審查作業流程」辦理。

3. 本證照清單於數位發展部資通安全署網站定期更新，機關如有任何疑問歡迎來電數位發展部資通安全署(02-2380-8500)反映。

 

參考資料：

1. TAF: https://www.taftw.org.tw/
   IAF: https://www.iafcertsearch.org/search/certification-bodies?standards_id=4cb16367-3cd5-5a6c-a382-1f524564b9d9&standards_name=ISO%2027001

2. ISC2: https://www.isc2.org/

3. CompTIA: https://certification.comptia.org/

4. CREST: https://www.crest-approved.org

5. EC-council: https://www.eccouncil.org/

6. GIAC: https://www.giac.org/

7. ISACA: https://www.isaca.org/

8. ISFCE: https://www.isfce.com/

9. OffSec: https://www.offsec.com/

10. Cisco: https://www.cisco.com

11. iPAS: https://www.ipas.org.tw/ise

12. ISA: https://www.isa.org/

13. HTB: https://academy.hackthebox.com/

14. The Cyber AB: https://cyberab.org/


於
標籤：

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

【Taiwan】ACAD, a provider of cybersecurity certification courses資安證照開課機構─安碁學苑

ACSI Cyber ​​Security Academy's vision is: Comprehensive Professional Training and Practical Skills Courses for Enterprise Information S...