[OT?] call for info on security professional certifications

[Tom Buskey]

On Tue, Apr 6, 2010 at 12:23 PM, Alan Johnson <alan at datdec.com> wrote:

> On Tue, Apr 6, 2010 at 11:23 AM, Benjamin Scott <dragonhawk at gmail.com>wrote:
>
>> On Tue, Apr 6, 2010 at 10:30 AM, Alan Johnson <alan at datdec.com> wrote:
>> > What we are trying to figure out is if we
>> > should included any certifications in either the "required" or "desired"
>> > qualifications.
>>
>


>    I have yet to see tests or courseware, but looking at the
>> brochureware, the GIAC/SANS and ISC^2 certifications describe what
>> look like good programs, once you get beyond the fundamental levels.
>>
>
> Thanks!
>

The SANS stuff is generally good.  They're associated with Usenix but I
think they might be more rigorous.

 Personally, while I place relatively little value on fancy pieces of
>> paper, I don't think they're worthless, either.
>>
>>
I agree.


>>  Full disclosure: I have no college degree and no major
>> certifications.  [However, on several occasions, I've been told I'm
>> "certifiable".  ;-) ]
>>
>
> As are many of the best techs I know. =)
>

We all know techs like that.  And Engineering PhDs that can't.

I guess the certs, etc really depend on the job description.  The certs
might be so far away from what you need that direct application is
irrelevant.  Some of them might be more for pen testing then defensive
admin.

-- 
If it's fixed, don't break it
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.gnhlug.org/mailman/private/gnhlug-discuss/attachments/20100406/b13a34d6/attachment.html