ITS Jobs

What "ITS" Means When You Search for Jobs

Search for "ITS jobs" and you will meet a muddle of unrelated results. Some listings use the acronym for transportation systems, some for internal help-desk teams, and some for a different vendor credential that sits in the same alphabet soup. This article is about one thing only: jobs where the ETA International Information Technology Security (ITS) certification is relevant. That credential is a written, knowledge-based certification administered by ETA International. It is separate from Certiport's Information Technology Specialist exams, and mixing the two up is the most common mistake candidates make when they read job boards.

If you are still orienting yourself, the explainers on what ITS is and what ITS stands for settle the terminology quickly. For the credential itself, see the ITS certification overview. The rest of this guide stays on the practical question: what work does this credential point toward, and who pays for it?

Roles That Fit the ETA ITS Credential

ETA's competency document recommends prior computer-systems and networking experience, and the issuer's badge description refers to practicing technicians. That framing tells you who the credential is built for: working technicians who touch networks, devices, and facilities and need to show they understand how to protect them. It is not positioned as a deep specialist certification for penetration testers or security architects. It is a broad fundamentals credential for people whose jobs sit next to security.

Typical roles where the knowledge maps well include:

• Network technician or field technician: installs and maintains switches, routers, access points, and cabling, and needs to harden them.
• Help-desk or desktop support specialist: handles malware cleanups, account lockouts, patching, and the first report of a phishing attempt.
• Systems support technician: manages endpoints, mobile devices, and software updates under written policy.
• Facilities-adjacent IT staff: works with badge readers, cameras, and server-room access control.
• Junior security or compliance support staff: assists with risk assessments, policy documentation, and incident response.

The credential works as a signal of baseline competence across several of these tracks. It rarely substitutes for experience, and most employers will weigh your practical record alongside it. For the full eligibility picture, see the ITS requirements guide.

Mapping the Ten Domains to Daily Duties

ETA states that examination questions derive from its published competencies, which makes the ten domains a useful lens for job descriptions too. Each domain corresponds to something a technician actually does. For a deeper walkthrough of every area, the complete guide to all ten content areas goes further than this summary.

Who Hires Technicians With Security Credentials

Because ETA's credential is written for practicing technicians, the employers that care most about it tend to be organizations with a large installed base of equipment and a need for documented competence. That includes managed-service providers, telecommunications and cabling contractors, school districts and colleges, local government, healthcare facilities, and businesses with their own on-site IT staff. These employers often value a third-party credential because it gives a hiring manager a quick, standardized signal.

Two notes of honesty are in order. First, this article cannot supply hiring volumes or a ranked list of employers, and anyone who offers precise numbers for a niche credential is guessing. Second, many employers will treat ITS as one signal among several rather than a hard requirement. Pair it with a documented work history, and describe in your resume which of the ten domains you have actually applied on the job.

What the Pay Evidence Does and Does Not Say

Candidates naturally want to know whether the credential raises pay. The honest answer is that the available evidence does not establish a certification-specific premium. ETA's official ITS fact sheet does include wage figures and employment projections, but it labels the wage figures as 2016 and the projections as covering 2022 to 2032. Those are occupational-category numbers, not proof that holding ITS earns you more, and they are too old to treat as current salary evidence.

A sensible way to think about it: the credential can help you qualify for interviews, support an internal promotion case, or satisfy an employer's documentation needs. Whether it moves your paycheck depends on your market, employer, and experience. For a broader discussion, the ITS salary guide and the ROI analysis weigh the trade-offs, and the cost breakdown helps you compare spend against likely benefit.

Qualifying: Experience, Exam, and Fees

The mechanics are simple enough to summarize in one table. These figures come from ETA's current credential page, booklet, and related pages.

Two clarifications prevent common errors. A 75% passing requirement describes the score you need; it says nothing about how many candidates pass, and no issuer-wide ITS pass rate has been verified. See the pass rate discussion and the passing score page for context. Also, ETA recommends prior computer-systems and networking experience and prior IT or networking certification, so a complete newcomer should expect a steeper climb, as covered in the difficulty guide.

Testing logistics

You arrange testing through an ETA Certification Administrator, using Trapeza online testing or paper and pencil. Remotely proctored testing is available through ExamRoom.AI after you register with ETA; initial scheduling can take up to 72 hours. Remote candidates need a working webcam, a microphone, a recent computer, and at least 3 Mbps of internet. Photo ID is required. Scratch paper and non-programmable or scientific calculators are allowed, but used scratch paper must be surrendered, phones are prohibited, and you may not leave the room once testing starts. Trapeza shows results immediately. For scheduling specifics, see the exam dates guide.

The Security+ rollover route

If you already hold a valid CompTIA Security+ (ce) credential, ETA offers a rollover route to ITS for USD 105 with proof of the current certificate. Lifetime Security+ certificates are excluded. This is an alternative way to obtain the credential, not evidence that the Security+ syllabus is the ETA blueprint, so if you sit the ETA exam itself, study to ETA's published 2024 competencies.

Worked Scenarios Hiring Managers Care About

Interviewers for technician roles tend to ask practical scenario questions rather than recite definitions. These examples mirror the competency areas and show how to reason through them. They are original illustrations, not exam questions.

Scenario 1: Cloud shared responsibility

A small clinic moves its scheduling software to a cloud provider and assumes the provider now handles all security. Where does the clinic's responsibility remain? In the shared-responsibility model, the provider secures the underlying infrastructure, while the customer remains responsible for items such as account management, access permissions, data classification, and how staff use the service. The right answer names the split rather than claiming either party owns everything.

Scenario 2: Physical surveillance and access control

A server closet is protected by a keypad code that every employee knows. What is the weakness, and what would you change? A shared code gives no accountability, so you cannot tell who entered. Individual badges or credentials with logging, plus camera coverage of the entrance, produce an audit trail. This ties directly to the physical security domain.

Scenario 3: RFID and NFC

Employees tap proximity cards at a door. A colleague worries someone could copy a card from a few inches away. Why is the concern reasonable? Some proximity credentials can be read or cloned at short range without the owner noticing, which is why credential type, shielding sleeves, and layered controls such as a second factor or camera review matter.

Scenario 4: IoT and Bluetooth

A facilities team adds smart thermostats and Bluetooth-enabled door sensors to the main network. What is the risk? Many small connected devices ship with weak default credentials and rarely receive updates, so they can become entry points. Segmenting them onto a separate network, changing defaults, and disabling unused pairing features reduce exposure.

Scenario 5: Risk math with SLE, ARO, and ALE

A single incident would cost an estimated 20,000 in damage (the single loss expectancy, or SLE), and analysts expect it about once every four years (an annualized rate of occurrence, or ARO, of 0.25). The annualized loss expectancy is SLE multiplied by ARO, so 20,000 times 0.25 gives 5,000 per year. A control costing less than that per year may be justified; one costing far more probably is not, unless it addresses other risks too. The numbers here are invented purely to demonstrate the formula.

Scenario 6: Recovery sites

An office needs to resume operations quickly after a fire. Compare a hot site, which is equipped and ready with current data and costs more, against a cold site, which offers space and basic infrastructure but takes longer to bring online, with a warm site in between. The correct choice depends on how long the business can tolerate downtime relative to cost.

Scenario 7: PKI

A user's browser warns that a website's certificate is not trusted. In a public key infrastructure, a certificate authority vouches for the binding between a public key and an identity. The warning may mean the certificate is expired, issued to a different name, or signed by an authority the browser does not trust. Understanding the chain of trust lets you diagnose the cause instead of clicking through.

Scenario 8: Social engineering

A caller claims to be from the help desk and asks an employee to read back a verification code sent to their phone. This is a classic pretexting attempt. The defense is policy plus habit: legitimate support never asks for one-time codes, and staff should verify requests through a known channel. This is the domain where training and procedure outperform technology.

Keeping the Credential Current

Many job seekers underestimate maintenance, but employers do notice when a credential lapses. ITS follows ETA's general, non-hands-on Maintenance program. You have two paths: submit the Certification Maintenance Form with 10 relevant continuing-education hours each year (40 across the four-year cycle), or submit a supervisor-completed Employer Verification Form. Either way, the fee is USD 25 annually, or USD 100 across four years, and annual submission includes ETA membership.

A Domain-Ordered Preparation Plan

Generic study advice is easy to find; the more useful question is which domain to tackle first. Because the exam is a 100-question written test covering ten competency areas without published weights, sequence your study so that foundational material comes before the topics that depend on it. The full approach appears in the ITS study guide, and a condensed review lives in the cheat sheet.

Use ETA's published competency document as your blueprint. If you add a commercial resource such as eITprep's Security+ study guide for ETA ITS, which lists USD 59.95 for six months, two custom practice exams, 100 electronic flashcards, a searchable glossary, and 45 course contact hours, remember that those are product features and course hours, not exam facts, and the course does not itself confer certification. Map any such material back to the ten ETA domains. When you want to test yourself, try the ITS practice tests and compare your weak areas against the domain list above.

Frequently Asked Questions