|
Home > Archive > Certifications and IT jobs/Salaries > November 2004 > Levels of IT Security certificates and the career
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Levels of IT Security certificates and the career
|
|
|
|
| walterbyrd 2004-11-04, 3:16 pm |
| Brainbench is a total joke, don't waste your time.
CompTIA Security+ is *very* rarely recognized.
GIAC is decent, but a far distant runner to the "gold standard" CISSP.
IMO: the CISSP is probably way overvalued, and the comptia is undervalued. GIAC has the best program out there, but it doesn't get the recognition of the CISSP. | |
| itflyer 2004-11-07, 3:59 pm |
| quote: Originally posted by walterbyrd
Brainbench is a total joke, don't waste your time.
CompTIA Security+ is *very* rarely recognized.
GIAC is decent, but a far distant runner to the "gold standard" CISSP.
IMO: the CISSP is probably way overvalued, and the comptia is undervalued. GIAC has the best program out there, but it doesn't get the recognition of the CISSP.
I agree with you in some points.
CompTIA is good for the entry-level as well as non-IT guys, it's too easy for professional IT people. So it gets deserved recognitions.
The biggest mistake GIAC made is it create so many kinds of certificates, no matter how worth they are, I have to say GIAC hired a stupid market director before. Compare ISC2, the latter only issue one - CISSP and spent more time and effort on it, now, after CISSP got enough reputations for ISC2, the ISC2 accordingly and "designedly" issued the ISSAP, ISSMP and ISSEP. I will not go for GIAC since it's too hard for HR managers to know, remember and understand what their tons of certificates' meaning are.
One thing I could not understand about that article is, why Ed Tittel listed CIA as the top information security Specialist Credentials? | |
| walterbyrd 2004-11-09, 8:43 am |
| I've got the security+ and I'm studying for the CISSP. The matterial covered is virtually identicle between the two certs . Yes, I know the CISSP is longer and has more questions. But, it's virturally the same matterial - and not in any greater depth.
Go to dice.com, do a nation-wide search on CISSP and you can expect about 400 hits. A nation-wide search on GIAC and another search on GSEC, added together, will get you about 30 hits. CompTIA Security+ will get you nothing.
I don't know if the too many certs offered by GIAC is a problem. If I were to claim a certification in firewalls by the GIAC, I think an HR rep could figure it out.
One problem I have with GIAC, is what do you call it? Some employers call it a SANS certification, others a GIAC, still other a GSEC. | |
|
| experience is all matter on security issue...
U can't get experience from cert, u need to build them up.. | |
| walterbyrd 2004-11-11, 10:35 pm |
| >>
experience is all matter on security issue...
<<
1) That's not really true. I have seen plenty of jobs that require a CISSP or GIAC certification.
2) One major reason that the CISSP is so valuable is because experience is so important - and unlike other certs - the CISSP is supposed to guarenty 3 or 4 years of experience. | |
| curiousgeorge 2004-11-12, 3:17 pm |
| CISSP changed their cert requirement a few years ago. Now you have to have 5 years of verifiable IT security experience before they will issue you a cert. Your employer must send in a confirmation of your experience.
HOWEVER, there are still those people out there that got their CISSP before the experience requirement was thrown in. So you still have paper certs out there.
I wish M$ would enforce experience as a requirement to getting MCSA and MCSE. That would put some dignity back into the certs again. | |
| Kasor 2004-11-20, 12:38 am |
| Jobs required Certs don't mean anything.
U still need experience.
Certification goal is to enhanced your existing skills. However due to the corruption of MCSE and other type of certifications.
Certs = Job = Certs... Sad.... | |
| itflyer 2004-11-22, 2:01 pm |
| No matter in USA, Canada, Euro or Asian, only one certificate can guarantee you to find a decent job 100%, that is CCIE.
if any CISSP, MCSE, CISA or other ones dare to involve the lab test part in their exam, they will be within the top value level for sure. | |
| phantomfreak 2004-11-26, 8:14 pm |
| The thing is... Just because you have experience not necessarily means you have the knowledge... if you're a network operator for 10 years, you're more then likely to know less then a network design engineer with 1 year of experience.... | |
| onoski 2004-11-28, 8:29 am |
| Phantomfreak, is your statement regarding you being a network design engineer | |
| phantomfreak 2004-11-28, 11:11 am |
| No not really, I was a network operator for about 2 years and just recently became a network engineer.... and from both sides, I've seen people with 5 to 10 years of industry experience but don't know how simple things like OSPF or EIGRP work...
Just making a general statement that, just because you have experience doesn't necessarily mean you might know more then someone who has less exp. but is more motivated to learn and is genuinely interested in the technology. |
|
|
|
|