Re: CISSP

[Nick Besant <lists () hwf cc>]

I think it's a worthwhile qualification to have if only from the point 
of view of structured learning.  Unless you've already done a CS or 
equivalent degree, it's unlikely that you'll have covered some of the 
architectural or formal methodologies, practices, standards etc that you 
must know to take the CISSP exam.  On-the-job learning is an excellent 
(I'm biased) way to learn all things security but you only tend to 
learn  the technologies etc around the environments you're working with.

I found the learning process, while covering some out-of-date material 
that I'm unlikely to use in future, did cover some additional areas 
which I've since applied to projects to my / my employer's benefit.

So; in summary, I would recommend it if you're looking for a broader 
certification/career path/etc focusing on security.  The breadth (not 
really the depth) of the body of knowledge has provided me with a way to 
cement together everything I've learned through working on or personal 
research.   YMMV :)


--
Nick Besant (lists () hwf cc)



dfullerton () mantor org wrote:
> Then I wonder if this certification should really have this kind of notoriety. Looks like it's not technical and if an 11 
> years old boy can complete this cert ...it's not about security management experience either.
>
> Anyone can give me some good reason to acquire CISSP while not being related to money and the wannabe marketing-made 
> notoriety?
>
> Personally I done GCIH and GHTQ, the latest is harder and really related to penetration testing. I would like some GOOD 
> reason for someone in the security field for a while and having others, more in deep, technical certification to go on 
> with CISSP.
>
> Should we glorify such things? Tell me more about the exam, the topics are quite general and may not be totally in line 
> with the exam and the real knowledge being certified.
>
> Danny Fullerton
> ---------------
> IT Security Specialist, GCIH GHTQ
> http://www.mantor.org/~northox
> Mantor Organization
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
> ------------------------------------------------------------------------
>
>   


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------