RE: Distinctions in Certification

Jim, very well said!

It is all about skill sets and educational background… it is not a role of a CISSP to run a port scan or to run a vulnerability assessment!

One cannot put a firewall administrator to write security policy handbook of an organization. Likewise, a CISSP may not be a good fit to manage a firewall farm.

One should also consider what side of fence they belong to…

In security arena there 2 tracks that lead up the profession (in my view at least)…

The first camp makes their way thru accounting/ auditing profession, i.e. IT auditing and financial auditing, etc., eventually leading into security management. This camp comes with a background in business and computer sciences. These folks are loaded with CPA, CIA, CISA, CISSP, Microsoft’s, unix and some other technical certs mentioned below.

The other camp comes from system administration and network engineering role leading into a security role. These professionals can be loaded with the most techie certs you could possibly think of… Microsoft’s, Cisco’s, various firewall/ PKI vendors, unix experts, etc.

Above all, when I am hiring, I look more their degrees and their experience then their certifications…

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Imran

• Original Message ---------

DATE: Thu, 14 Aug 2003 01:08:21
From: James Taylor <james_n_taylor@yahoo.com> To: security-basics@securityfocus.com
Cc:

>> ATTACHMENT part 3 message/rfc822

Need a new email address that people can remember Check out the new EudoraMail at
http://www.eudoramail.com