Home > Ask the Security Experts > Expert Archive: Security Management Questions & Answers > Intermediate-level security certifications
Ask The Security Expert: Questions & Answers
EMAIL THIS

Intermediate-level security certifications

Shon Harris, past SearchSecurity.com expert EXPERT RESPONSE FROM: Shon Harris, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 17 January 2006
Other than the CISSP, CISA and CISM, what is the most useful, hands-on, intermediate-level security certification that's also applicable to the real world?


BROWSE BY TAG
Information Security Careers, Training and Certifications,   CISSP Certification,   Expert Archive: Security Management,   Security Industry Certifications,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
CISSP Certification
IT security skills and certification pay
Despite recession, pay climbs for top IT security certifications
Information security book excerpts and reviews
Security skills pay increases despite economic downturn
How do I get CPE credits?
Finding a security management job after an economic downturn
What is the GISP certification and how does it compare to the CISSP certification?
Security certifications
Certification still pays for CISSPs, CISMs
CISSP Domain 1 quiz: Security Management Practices
CISSP Certification Research

Expert Archive: Security Management
What is the GISP certification and how does it compare to the CISSP certification?
Using a QSA to write up a PCI DSS report on compliance (ROC)
How can gap analysis be applied to the security SDLC?
Comparing low-cost security appliances to bigger, pricier appliances
What are some tips on protecting my security budget in a poor economy?
What value do research firms provide to their subscribing enterprises?
What certificate offers the best ROI for an IT project manager?
Is insider activity or outsider activity a bigger enterprise threat?
How does information security prevent fraud in the enterprise?
Differences between an SAS 70 data center and a Tier III data center

Security Industry Certifications
Security jobs survey finds fewer budget cuts, lower security salaries
IT security skills and certification pay
Despite recession, pay climbs for top IT security certifications
How do I transition to a career in IT security?
Security skills pay increases despite economic downturn
How do I get CPE credits?
Getting the CEH certification to join an ethical hacking network
What is the GISP certification and how does it compare to the CISSP certification?
New certification targets software security
Security certifications

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Certified Information Systems Security Professional  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


While most people understand the benefits of the widely accepted and known certifications, CISSP and CISA, they still get confused when examining other available certifications. Additionally, while some certification exams are useful, unfortunately many are not. The fact that there isn't a committee to qualify the existing exams, a holistic certification roadmap to follow, and that many exams are created by training companies looking to sell more training sessions, leave people unsure how to properly advance their knowledgebase and careers.

At this time, SANS has the best process and exams. They have mature curriculum, some of the best instructors in the industry and difficult practical exams. In addition, these certifications are currently more recognizable than many of the other industry certifications. However, SANS does have a couple of drawbacks:

  1. SANS is proprietary. If you want to take an exam, you must enroll in their training program.

  2. Their practical exams are difficult and time-consuming. While SANS offers numerous exams, only approximately 10,000 people have been certified -- mainly due to the difficulty of the exams.

When researching types of certifications, consider what you want to accomplish. CISSP is a broad exam that provides a good foundation for anyone in the security sector. More people are taking the Certified Information Systems Auditor (CISA) exam, because of the increased government regulations affecting organizations. However, even if you are not and do not want to be an auditor, I recommend taking this exam, because at some point in your career, you'll need to pass audit evaluations and it would be beneficial to understand the auditing process.

Now that we've examined the benefits of the more recognizable certifications, here's an overview of some others:

  • CompTIA has an entry-level security exam called, Security+. It does not hold a lot of value in the market, but it is a good place to start if you're new to security.

  • If you are a networking professional, you may want to look at Microsoft and/or Cisco's security certifications.

  • If you're a forensics professional, look into taking the Certified Computer Examiner (CCE) exam. It's currently the most recognized and respected exam because of its practicality and hands-on approach. Since EnCase is the most popular tool used in forensics, it's beneficial to achieve their certification.

  • If you want to be a wireless security professional, look into the CWNP series. You can find information about these at http://www.cwnp.com.

  • If you're a government contractor, in the military or work for a government agency, I suggest you look into (ISC)2's ISSEP and their new CAP exam. The CAP is specific to DoD certifications and accreditation requirements.

Although you can benefit from ISC(2)'s SSCP and CISSP concentrations (ISSAP, ISSMP), TruSecure's TICSA or TICSE, and other certifications offered by various training companies, they're not accepted by the industry. Therefore, most employers do not recognize them, so they will not necessarily help with job advancement.

Overall, the CISSP and CISA are useful to almost anyone in the security sector. From there you will need to specialize. There are certification exams that cover broad topics, but they are not as recognized as the CISSP and CISA certifications and overlap in material.


More Information:

  • Visit our Guide to vendor-neutral security certifications to learn what other certifications are available.

  • Learn why it pays to be a security professional.

  • Learn how to break into security.




  • Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts