[ok] [Full-Disclosure] Certifications
srenna at vdbmusic.com
Mon Nov 22 14:47:59 GMT 2004
I would agree with these statements as well. I'm carrying 2 GIACs(GCIA
and GCIH) as well as CISSP. I feel that the CISSP is a very broad
general overview of the concepts of security; however, there are far too
many unqualified people attending boot camps and passing the
examination. The CISSP definitely helped get me in the door for jobs,
but if you want some really technical meaty stuff that requires study
and talent, I would recommend pursuing the GIACs. Each one of them
requires that the candidate write a paper and if that passes, you get to
take the exams. This way of testing ensures that the student has not
just spent time memorizing things like HIPAA enforcement. It's a rough
journey, but you'll learn alot pursuing a GIAC.
Scott Renna CISSP, GCIA, GCIH, CCNA, CCDA
Curt Purdy wrote:
> Paul wrote:
>>While I gotta agree that experience is what counts, what (if
>>any) specialist certs should a tertiary student, with a
>>special interest in security, use to underpin their prac?
>>P.S. If I'm too ignorant to warrant a civil answer, like
>>being told to go to the movies, my apologies in advance so no
> Not everyone on this list are crude brainless kiddies Paul (though too many
> are ;) Having said that, let me address your main point. With a number of
> letters behind my name (will have to drop the CCDA to accommodate my
> upcoming GSNA), I feel qualified to answer your question.
> For some reason the CISSP is considered one of the most prestigious certs.
> I describe it as a river a mile wide and 6 inches deep. However, I found it
> relatively easy to obtain with no schooling required, as were all my other
> certs, except for the GSEC that required an 8x12-hour day intensive SANS
> class (in my case complemented with a co-ordinated national meeting of
> military IS people and keynote by Richard Clarke, who I respect very much).
> I tell people that you come out of that either scared to death or with a
> brain, two hat-sizes bigger.
> Most GIAC certs are very technical in nature. I describe them as being a
> quarter-mile wide and 20 feet deep. Although I passed the GSEC on first try,
> the test was much more difficult than the CISSP. That is why I decided to
> pursue my GSNA as opposed to a CISA. And in that one 6-day class, I
> shoe-horned enough stuff in my brain to keep me busy for months. Well worth
> the money.
> My .02
> Curt Purdy CISSP, GSEC, CNE, MCSE+I, CCDA
> Information Security Engineer
> DP Solutions
> If you spend more on coffee than on IT security, you will be hacked.
> What's more, you deserve to be hacked.
> -- former White House cybersecurity adviser Richard Clarke
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
Full-Disclosure is hosted and sponsored by Secunia.