Re: The Value of GIAC/GSEC Certification


I guess I should add that I have an M.S. in C.S. from Illinois, 20 years experience (mostly in the software development area, C++, etc.) and a fairly senior level position now. I am just transitioning into a full time "Security Guy" working on compliance issues and I want to continue enhancing my career.

I want to weight the value of spending the money and study time to get the GSEC, especially if I attend the SANS Security Essentials course this year. (I may or may not do that, I haven't decided yet.)

I am doing a lot of reading either way. I also purchased the Shon Harris course, so that may ultimately be sufficient.

I am also an overacheiver, but I want to make sure to stay somewhat focused. :)

Brad

Quoting Kim Guldberg <kim@xxxxxxxxxxxxx>:

Ohhhh yes, Big time

CISSP is a broad common body of knowledge certification with no depth
at all. IMHO anybody with 3 weeks time to spend, a reasonable head, a
heart for reading and remembering can pass a CISSP.

GIAC certifications requires knowledge, skill and understanding and has
depth. GIAC certifications are practical as well as theoretical.

A CISSP certification is a foundation certification that will lead to a
entry level job in the IT security industry or a non technical job,
i.e. sales or marketing, unless you have other expert level technical
education in witch case a CISSP will serve as an introduction into an
IT security job

GIAC will lead you to an expert level job, i.e. firewall analyst,
forensic analyst and the likes

Relevant Pages

  • Re: [Full-Disclosure] Security Certifications
    ... Security Advisory MA-2003-01 CISSP - Trojan Security Certification ... standard for professional certification in the field of information security. ...
    (Full-Disclosure)
  • Re: OSCP
    ... CISSP is widely accepted ... OSCP is really good for getting hardcore experience, ... My opinion is that very good practical course and certification for this ... Security 101" course to receive the OSCP (Offensive Security Certified ...
    (Pen-Test)
  • Re: Re: CISSP
    ... What source says that a 11 years old boy got CISSP? ... direct full-time security professional work experience ... you have to look for another certification. ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: Re: CISSP
    ... certification which is derived of multiple certs. ... CISSP is the simplest choice of them all. ... It's a requirement for most companies seeking security ...
    (Pen-Test)
  • RE: Distinctions in Certification
    ... It is all about skill sets and educational background… it is not a role of a CISSP to run a port scan or to run a vulnerability assessment! ... One cannot put a firewall administrator to write security policy handbook of an organization. ... >You've had students with the CISSP certification? ...
    (Security-Basics)