What does the day-to-day work of cyber security specialists with a federal certificate look like?

Cyber security is a sub-area of ICT management. Cyber security specialists with a federal certificate ensure that their company's communication and information systems are protected against data leaks and unwanted, harmful or criminal attacks from cyberspace. On the one hand, they work preventively by evaluating risks, taking suitable protective measures and training employees. On the other hand, they are deployed if a so-called "security event" should nevertheless occur - then it is their job to stop the data leak, fix vulnerabilities, etc. and thus minimize the damage as far as possible.

Your main tasks are

• Analyze and evaluate the security of the company's information and communication systems
• Monitoring the threat situation in cyberspace
• foresee possible threats to your company
• Take measures to increase safety
• Sensitize and train employees in cyber security
• Monitor systems and data in operation and detect security incidents
• Analyze security incidents and respond with appropriate protective measures

Cyber Security Specialists with a federal certificate are qualified to lead smaller teams in operations and can - depending on the size - manage projects or sub-projects. In larger companies, they often work in a team with other ICT security specialists and jointly implement the management guidelines for the security strategy.

As a rule, they work in medium-sized or large private companies in all sectors and in public institutions.

Target group - Who is the professional examination for Cyber Security Specialist with federal certificate suitable for?

The "Cyber Security Specialist (BP)" courses are suitable for people:

• with experience in ICT security, who are operationally active in cyber security and would like to develop further in this IT field and take on more responsibility.
• who are interested in the risks and dangers associated with digitalization and who want to use their IT knowledge and skills to combat and mitigate them and thus work in an increasingly important economic sector.

It is aimed at people with

• quick comprehension
• strong analytical skills
• Good system and process thinking
• Sense of responsibility
• Discretion and integrity
• Perseverance and good frustration tolerance
• Strong communication and teamwork skills
• good knowledge of English

Requirements for admission to the federal professional examination Cyber Security Specialist (BP)

You must meet one of the following requirements for admission to the federal professional examination "Cyber Security Specialist (BP)":

• EFZ in an ICT profession and at least 2 years of professional experience in the field of cyber or information security
• EFZ in another (non-ICT) profession, completion of a higher general school education or equivalent qualification and at least 4 years of professional experience in the ICT field, including at least 2 years in the field of cyber or information security
• (other previous education) at least 6 years of professional experience in the ICT field, of which at least 2 years in the field of cyber or information security
• Successful completion of the Swiss Armed Forces cyber course and at least 1 year of professional experience in the field of cyber or information security

The cut-off date for proof of the required professional experience is the day on which the examination begins.

Please note: Some schools may be prepared to admit you to a course in preparation for the Cyber Security Specialist professional examination if you do not (yet) meet the criteria for admission to the federal examination. It is then up to you to ensure that you meet the necessary requirements at the time of the examination/examination registration.

Subject matter and content of the training

The content of the courses offered by the various providers in preparation for the federal professional examination "Cyber Security Specialist" is based on the specifications of ICT-Berufsbildung Schweiz, the sponsor of the professional examination.

The course material is divided into 13 modules:

• Leading and promoting teams (Module 674)
• Obtaining and processing information about threats (Module 679)
• Checking the security of the ICT infrastructure (module 680)
• Detecting and defending against attacks on ICT infrastructures (Module 681)
• Handling security incidents (Module 682)
• Analyzing and interpreting databases (Module 683)
• Examine systems digitally forensically, i.e. for evidence of criminal activity (Module 684)
• Ensure vulnerability and patch management (i.e. ways to eliminate them) in the company (module 685)
• Advise and train clients professionally (Module 686)
• Delimiting systems and defining requirements (Module 687)
• Calculating and budgeting expenditure for ICT projects (module 688)
• Evaluating IT solutions (Module 689)
• Planning, managing and monitoring projects (Module 690)

Costs and financing of further training

The costs and the scope of services included vary slightly depending on the provider. On average, the following costs can be expected for the 2- or 3-semester courses:

• Course fees: approx. CHF 15,000; half of this will be refunded to you after passing the federal examination (federal contributions)
• Fee for the federal professional examination: CHF 3,200
• Some providers charge additional costs for enrollment, simulation tests, etc.

Duration of study, number of lessons and learning effort

The courses are part-time, last 2 or 3 semesters and comprise approx. 520 teaching units. There are various teaching formats to choose from:

• Face-to-face teaching on up to four half-days (during the day, afternoon and/or evening, Saturdays) per week (for 2-semester courses) plus additional time for class preparation and follow-up as well as self-study time
• Pure online teaching with individually organized self-study units and regular meetings in the virtual classroom
• Combined face-to-face and online teaching (blended learning) with self-study units, virtual and real meetings (workshops, classrooms, etc.)

Depending on the duration and type of course you choose and your learning habits, you should expect to spend between 12 and 20 hours per week preparing for the Cyber Security Specialist professional examination.

Degree, diploma and title

How does the professional examination to become a Cyber Security Specialist work?

The examination for the federal certificate as a Cyber Security Specialist consists of three parts:

Part 1 / Cyber Security: 5 hours of practical case work (weighting 60%)

Candidates receive a task (in English) and must demonstrate their job-specific competence as a Cyber Security Specialist by completing the task (in English or German) in a simulated practical situation.

Part 2 / Projects and Business Administration: 2 hours in writing (weighting 20%)

Candidates work on a realistic practical task in a written assignment and thus demonstrate their skills in project management and job-specific business management topics.

3rd part / Leadership and communication: 45 minutes oral (weighting 20%)

In an oral case study and in a technical discussion, the candidates prove that they have the necessary personal and social skills for team leadership and communication as a Cyber Security Specialist.

Here are some general success factors on the way to a new training qualification:

• Interest in the topic and active participation in class
• Bring in your questions, don't leave anything half-understood in the room
• Regular preparation and follow-up of the lesson material
• Committed cooperation in group work, case studies etc.
• Participation in learning groups for regular exchange
• Practicing exam situations, e.g. in simulation exams and hacker labs

Diploma and title

Successful graduates of the professional examination receive a federal certificate and may use the following recognized and protected title:

"Cyber Security Specialist with federal certificate"

The English translation is:

"Cyber Security Specialist, Federal Diploma of Higher Education"