資通安全專業證照清單

日期：108 年 2 月 27 日

序 發證機構(單位) 管理類 技術類

1. (ISC)2 國際資訊系 1. Certified Information Systems
統安全核准聯盟 Security Professional(CISSP)
[1] 2. Systems Security Certified
Practitioner(SSCP)
3. Certified Cloud Security
Professional(CCSP)
4. Certified Authorization
Professional(CAP)
5. Certified Secure Software
Lifecycle
Professional(CSSLP)
6. HealthCare Information
Security and Privacy
Practitioner(HCISPP)
7. Information Systems Security
Architecture
Professional(CISSP - ISSAP)
8. Information Systems Security
Engineering
Professional(CISSP - ISSEP)
9. Information Systems Security
Management
Professional(CISSP - ISSMP)
2. The Computing 1. CompTIA Security (CompTIA
Technology Security+)
Industry 2. CompTIA Cybersecurity
Association Analyst (CySA+)
(CompTIA) [3] 3. CompTIA Advanced Security
Practitioner (CASP+)
4. CompTIA PenTest (CompTIA
PenTest+)
3. CREST[4] 1. Penetration Testing
(1) The CREST Practitioner
Security Analyst (CPSA)
(2) The CREST Certified
Wireless Specialist
(CCWS)
2. Simulated Target Attack &
Response/CBEST
(1) The CREST Certified
Simulated Attack Specialist
(CC SAS)
(2) The CREST Certified
Simulated Attack Manager
(CC SAM)

1
 序 發證機構(單位) 管理類 技術類
(3) The CREST Registered
Threat Intelligence Analyst
(CRTIA)
(4) The CREST Certified
Threat Intelligence
Manager (CC TIM)
3. Incident Response
(1) The CREST Practitioner
Intrusion Analyst (CP IA)
(2) The CREST Registered
Intrusion Analyst (CRIA)
(3) The Certified Network
Intrusion Analyst (CC NIA)
(4) The CREST Certified Host
Intrusion Analyst (CC HIA)
(5) The CREST Certified
Malware Reverse Engineer
(CCMRE)
(6) The CREST Certified
Incident Manager
4. Security Architecture
(1) The CREST Registered
Technical Security
Architect Examination
(CRTSA)
4. EC-Council[5] 1. Certified Chief Information 1. Certified Network Defender
Security Officer (CCISO) Course (CND)
2. EC-Council Information 2. Certified Ethical Hacker(CEH)
Security 3. EC-Council Certified Security
Management(EISM) Analyst(ECSA)
4. Computer Hacking Forensic
Investigator(CHFI)
5. EC-Council Certified Incident
Handler(ECIH)
6. EC-Council Disaster Recovery
Professional(EDRP)
7. Certified Threat Intelligence
Analyst (C|TIA)
8. Certified Application Security
Engineer (CASE)
5. Elearning 1. eLearnSecurity Certified
Security[6] Professional Penetration
Tester (eCPPTv2)
2. eLearnSecurity Certified
Reverse Engineer(CRE)
3. eLearnSecurity Junior
Penetration Tester(eJPT)
4. eLearnSecurity Mobile
Application Penetration
Tester(eMAPT)
2
 序 發證機構(單位) 管理類 技術類
5. eLearnSecurity Network
Defense Professional(eNDP)
6. eLearnSecurity Web Defense
Professional(eWDP)
7. eLearnSecurity Web
application Penetration
Tester(eWPT v1)
8. eLearnSecurity Web
application Penetration
Tester(eWPTX)
9. eLearnSecurity Certified
Penetration Tester
eXtreme(eCPTX)
10. eLearnSecurity's Certified
Threat Hunting Professional
(eCTHP)
11. eLearnSecurity Certified
Digital Forensics
Professional(eCDFP)
12. ECPPT Gold was the
designation for ECPPTv1.
This certification is not
supported anymore as it has
been replaced by
ECPPTv2(eCPPT GOLD)
6. Global Information 1. GIAC Security 1. GIAC Security
Assurance Leadership(GSLC) Essentials(GSEC)
Certification 2. GIAC Strategic Planning, 2. GIAC Certified Incident
(GIAC) [7] Policy, and Handler (GCIH)
Leadership(GSTRT) 3. GIAC Certified Forensic
Analyst(GCFA)
4. GIAC Penetration
Tester(GPEN)
5. GIAC Certified Intrusion
Analyst(GCIA)
6. GIAC Web Application
Penetration Tester(GWAPT)
7. GIAC Certified Forensic
Examiner(GCFE)
8. GIAC Reverse Engineering
Malware(GREM)
9. GIAC Information Security
Fundamentals(GISF)
10. GIAC Certified Enterprise
Defender(GCED)
11. GIAC Systems and Network
Auditor(GSNA)
12. GIAC Certified Windows
Security
Administrator(GCWN)
3
序 發證機構(單位) 管理類 技術類
13. Global Industrial Cyber
Security
Professional(GICSP)
14. GIAC Continuous
Monitoring
Certification(GMON)
15. GIAC Network Forensic
Analyst(GNFA)
16. GIAC Certified Perimeter
Protection Analyst(GPPA)
17. GIAC Exploit Researcher
and Advanced Penetration
Tester (GXPN)
18. GIAC Information Security
Professional(GISP)
19. GIAC Critical Controls
Certification(GCCC)
20. GIAC Mobile Device
Security Analyst(GMOB)
21. GIAC Assessing and
Auditing Wireless
Networks(GAWN)
22. GIAC Certified UNIX
Security
Administrator(GCUX)
23. GIAC Secure Software
Programmer-Java(GSSP-
JAVA)
24. GIAC Certified Web
Application
Defender(GWEB)
25. GIAC Cyber Threat
Intelligence(GCTI)
26. GIAC Law of Data Security
& Investigations(GLEG)
27. GIAC Advanced Smartphone
Forensics(GASF)
28. GIAC Response and
Industrial Defense(GRID)
29. GIAC Secure Software
Programmer- .NET(GSSP-.N
ET)
30. GIAC Certified Detection
Analyst (GCDA)
31. GIAC Security Expert(GSE)
32. GIAC Critical Infrastructure
Protection(GCIP)
33. GIAC Defending Advanced
Threats(GDAT)

4
 序 發證機構(單位) 管理類 技術類
7. Information 1. Certified Information
Systems Audit and Security Manager(CISM)
Control 2. Certified in the Governance
Association of Enterprise IT (CGEIT)
(ISACA)[8] 3. Certified Information
Systems Auditor (CISA)
4. Certified in Risk and
Information Systems
Control (CRISC)
8. The International Certified Computer
Society of Forensic Examiner(CCE)
Computer
Examiners (ISFCE)
[9]
9. Offensive 1. Offensive Security Certified
Security[10] Professional(OSCP)
2. Offensive Security Certified
Expert(OSCE)
3. Offensive Security Wireless
Professional(OSWP)
4. Offensive Security
Exploitation Expert(OSEE)
5. Offensive Security Web
Expert(OSWE)

註：本清單每半年定期更新，機關如有任何疑問，歡迎來電(02-33568207)或
使用意見信箱(yswang@ey.gov.tw)反映。

5
參考資料：

1. (ISC)2 ：https://www.isc2.org/
2. BSi：https://www.bsigroup.com/
3. CompTIA：https://certification.comptia.org/
4. CREST：https://www.crest-approved.org
5. EC-council：https://www.eccouncil.org/
6. Elearning Security：https://www.elearnsecurity.com
7. GIAC：https://www.giac.org/
8. ISACA：https://www.isaca.org/
9. ISFCE：https://www.isfce.com/
10. Offensive Security：https://www.offensive-security.com
11. SGS：https://www.sgs.com.tw/
12. 中華民國電腦技能基金會：https://www.csf.org.tw/