Ah, the age old question. CISSP or not... or some other
certification.... I truly belive that the point is being missed. No
test, CISSP or anything else garuntees knowledge. No employer worth his
salt will hire you based on a CISSP certification or any other cert. If
he does, I would worry.
Security isn't something you just take a test on and become an expert.
It's a mindset, a way of thinking. It's "Planning for Murphey's Law".
You don't get that out of a book. You don't get that from a test. I know
some CISSP individuals that are extremely clued. I know others, who
instead of riding the clue bus... were apparently hit by it. The CISSP
certification touches on great subjects... the study book has some good
stuff inside it. But, don't be fooled in thinking that a certification
would in any way mean your a security expert. It doesn't even
necessarily mean you're on you way to being an expert. It means you can
pass a test.
Learn to balance paranoia with your company's requirements... that's a
start.
D Clyde Williamson APP (A Paid Paranoid)
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]