Re: Entry Level Certifications

You can still take the CISSP exam, but you will take it in order to get an
Associate of ISC^2 or something like that. Then when you have the
relavent experience, you apply to become a CISSP. It isn't quite as
impressive, but it shows that you at least have the knowledge to pass the
test and may be good enough for some organizations. Alternately, you
could take the test for SSCP, which is another ISC^2 certification. There
is a good writeup here of a new DOD list of accepted certifications:
http://taosecurity.blogspot.com/2006/01/dod-directive-8570.html

-----
Beau Woods
Information Security Analyst
DeKalb Medical Center
(404)501-3825
beau_woods@xxxxxxxx





"Matt Bowles" <bowles.matt@xxxxxxxxx>
03/26/2006 04:31 PM

To
<security-basics@xxxxxxxxxxxxxxxxx>
cc

Subject
Entry Level Certifications






I have a question and was hoping that someone could give me some advice on
the next step that I should take. I graduated college about a year and a
half ago and have been working as a help desk tech for about two years.
During that time, I had taken on many responsibilities that had to do with
information security. Such as creating domain accounts, access to network
resources, antivirus and patch management etc. I have read through a lot
of
security material such as:

Wiley and Sons, the CISSP Prep Guide
Penetration Testing and Network Defense by Cisco Press
Managing Cisco Network Security Second Edition by Syngress Books
Numerous websites and security focus mailing lists such as this one and
Pen
Testing and Security management

The trouble for me right now is since I only have two years of experience,
I
am not eligible to take the CISSP. It requires a four year degree and
three
years of Information Security experience. So my main question is, what
would a good certification be that I could take with only two years of
experience?

Any suggestions / comments would be greatly appreciated!

Matt Bowles


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity
Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CONFIDENTIALITY NOTICE: This e-mail, including attachments, is for the sole use of the individual(s) to whom it is addressed, and may contain confidential and privileged information, including HIPAA protected PHI. Any unauthorized review, use, disclosure, distribution, or reproduction is prohibited. If you have received this e-mail in error, please notify the sender by reply e-mail and destroy this message and its attachments in its entirety.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: Re: University Degree or CISSP
    ... A legitimate CISSP requires at a minimum of 4 years of industry ... degree with experience, or cert with experience. ... SECURITY+ is OK, but combined with a NETWORK+ and an A+, shows that you ... mostly management concepts in security. ...
    (Security-Basics)
  • Re: Hacker Stories, Certs, vs Projects - Was Re: Technitium MAC Address Changer v3.1 (FREEWARE)
    ... Not a rant just something to think about the next time you claim mastery! ... security credential showing mastery of all aspects of security, ... disagree that a CISSP shows a mastery of all things security. ... testing and vulnerability management needs. ...
    (Pen-Test)
  • Re: Hacker Stories, Certs,vs Projects
    ... The CISSP cert should be kept in perspective. ... It is a good certification for people on a managerial level to have because it gives them a fairly broad, high level view of the security field, which they need to do their job more effectively. ... -not boasting or professing mastery. ... there, then we wouldn't have configuration management issues, patch management ...
    (Pen-Test)
  • RE: [Full-Disclosure] Security Certifications
    ... If you spend more on coffee than on IT security, ... Never read the CISSP trojan? ... Security Advisory MA-2003-01 CISSP - Trojan Security Certification ... affected target promotes itself to a "Certified Information Security ...
    (Full-Disclosure)
  • Re: Information Security in Mergers and Acquisition
    ... Deciding on Security Appetite ... impact on the business of IT-related risks. ... & Procedures Documents on the basis of Information security practices ... as mentioned above and Management Commitment of the new organization. ...
    (Security-Basics)