RE: Distinctions in Certification

Well as someone who hires security staff, I look for hands-on real world experience. The CISSP and the rest are all too conceptual based, I've had students with these certs who do not know how to do fragmented port scans.

>From my experience a pratical security certification such as the ESA
from www.securityassociate.org really puts into practise text-book knowledge. We have around 20 ESA's at BT and are happy with the skills of the engineers.

But nothing beats real world experience and no cert can give you this.

Peter Baxter
British Telecommunications PLC
Head of Information Security - Europe and Asia Tel: +44 (0)20 450 5000 ext. 4456
[Email is spam protected]

-----Original Message-----
From: Jarrod Loidl [mailto:loidlja@corp.earthlink.net] Sent: Wednesday, August 13, 2003 1:57 AM To: security-basics@securityfocus.com
Subject: Distinctions in Certification

Whats the difference between the different security certifications? ie. GIAC cert vs. CISSP? Whats the different in the eyes of the industry, as well as prospective employers (if you are wanting to draw a distinction between the two).

-- 
Jarrod Loidl
Network Abuse Engineer
Earthlink, Inc.


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
----------------------------------------------------------------------------