There are several organizations which offer certification but the CISSP and
SANS GIAC programs are probably the top two (right now) and the ones being
asked for by employers right now. Here are some other organizations to
check out:
Computer Security Institute (CSI) http://www.gocsi.com
Information Systems Security Association (ISSA) http://www.issa-intl.org
International Computer Security Association (ICSA) http://www.icsa.net
And of course there are vendor certifications for just about every security
product on the market. They are coming out of the woodwork. Cisco is
announcing its CiscoSafe product line (followed by many more certifications
I'm sure). In my opinion most certifications are just money makers for
vendors, just about everything has a certitifcation or MULTIPLE
certification levels these days. Company management doesn't know any better
so they jump on the band wagon and require employees with
certifications. Any IT professional knows experience is worth more than
certifications. But without certifications, how do you prove to a
potential employer you have the skill set? Tough question. Comments anyone?
Anybody can be book smart and pass a test. I know plenty of people who
have studied for their CISSP or MCSE without any experience or working
knowledge in either category. They still passed the exams!
Certifications are flooding the IT world. No one can possibly keep up. A
certification in your current job might not be worth a dime in your
next. Choose wisely!!!
And I ramble on...
Kevin
At 05:26 PM9/27/00 Wednesday-0500, Tomas Huynh wrote:
>Anyone else has more input to this subject?
>
>
>Regards,
>
>/T
> -> From [EMAIL PROTECTED] Mon Sep 25 09:22:02 2000
> -> Delivered-To: [EMAIL PROTECTED]
> -> From: [EMAIL PROTECTED]
> -> Subject: Re: IT Security qualification certificate
> -> To: "Ingram, Richard" <[EMAIL PROTECTED]>,
> [EMAIL PROTECTED]
> -> Date: Mon, 25 Sep 2000 09:14:24 -0500
> -> X-MIMETrack: Serialize by Router on
> MMLNTS10.minnesotamutual.com/Minnesota Mutual(Release
> -> 5.0.4 |June 8, 2000) at 09/25/2000 09:14:26 AM
> -> Sender: [EMAIL PROTECTED]
> -> X-Loop: [EMAIL PROTECTED]
> -> Status: RO
> ->
> ->
> -> Richard,
> ->
> -> #I am presently employed as a security consultant for NT OS security in a
> -> #large WAN environment.
> -> #I have reasonable experience with NT, Netware and Linux.
> -> #I would like to strengthen my security skills and obtain a relevant
> -> #qualification.
> -> #My question is what qualification is the most recognised and respected.
> -> #SANS? ISS? or some other?
> ->
> -> There are several respected Security certs.
> ->
> -> CISSP - www.isc2.org
> -> SANS GIAC - www.sans.org
> ->
> -> And there are vendor certs for individual products. ISS has vendor certs
> -> and Security classes. I do not think that ISS has a non-product specific
> -> cert. I am a CISSP and I think the CISSP is a good cert to have but
> a cert
> -> means NOTHING if you don't have practical EXPERIENCE. The biggest
> reason I
> -> worked for my CISSP is because I do not have a college degree and I can
> -> point to my CISSP and say that a respected institution says that I know
> -> what I am talking about. The CISSP is the 50,000 foot level cert. It is
> -> for the Security Manager or consultant. I am also looking at getting the
> -> SANS GIAC cert. It is more of a security administrator/man in the
> trenches
> -> cert. Either of these would be the certificate to earn but I think that
> -> the CISSP is more widely known at the moment.
> ->
> -> There are other certs that I have not mentioned
> ->
> -> Regards,
> -> Jeffery Gieser
> ->
> -> -
> -> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> -> "unsubscribe firewalls" in the body of the message.]
> ->
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
*************************************
Kevin T Johnston
Research Engineer
Syracuse Research Corporation
6225 Running Ridge Road
North Syracuse, NY 13212
Phone: (315) 452-8318
FAX: (315) 452-8310
Email: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
