the need for a professional certification to maintain and validate a common knowledge, values, and ethics for individuals in the industry became a growing concern. several it professional societies recognized that a certification program attesting to the qualifications of information security personnel was needed.