RE: IDS Training Plan & Job Descriptions

From: Bill Royds (email@royds.net)
Date: 01/22/02 

From: "Bill Royds" <email@royds.net>
To: <thlewis@jetaconsulting.com>, <focus-ids@lists.securityfocus.com>
Date: Tue, 22 Jan 2002 14:30:45 -0500

I would suggest looking at the SANS GIAC training in IDS at http://www.giac.org
Depending on the trainee's TCP/IP and networking experience and knowledge, he/she should also look at the SANS GSEC Security essentials program.
This is good solid training with practical study, not just memory work.

-----Original Message-----
From: Thomas Lewis [mailto:thlewis@jetaconsulting.com]
Sent: Mon January 21 2002 12:02
To: focus-ids@lists.securityfocus.com
Subject: IDS Training Plan & Job Descriptions

I was helping a client put together a training program for a new IDS
position they have created and was wondering if this group had any
recommendations on good training courses, books, mailing lists (other than
this one of course), etc. that would be helpful for this person. We
anticipate this person would have a newbie's level of knowledge regarding
IDS/Incident Response.

Also, we are writing a job description for this position and if anyone has
any examples that they would be willing to share it would be much
appreciated,

Thanks

Thomas Lewis