Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm about to do my master and I need to make a decision on what course I should take now I have two options either computer forensics or information security

What I want to know is:

  • What is the difference/gap between these two disciplines?

  • Are they somehow related so if I take any of them I can still go and practice the other field - in case I wanted to change my job field?

share|improve this question
    
Please gain 20 reputation points and feel free to ask this question in the DMZ, this is not a career advice forum. –  Deer Hunter May 23 '13 at 10:38
    
@DeerHunter thanks for the hint :) –  user2309720 May 23 '13 at 10:40
    
user2309720, this hint (-1) was not mine :| –  Deer Hunter May 23 '13 at 10:42
    
@DeerHunter ops...the hint I meant it for the comment not the -1 as that should be called hint it's a gun shoot :-P –  user2309720 May 23 '13 at 10:44
    
user2309720, have you tried comparing the outlines of the two courses? Have you done any other research on the issue? If you have please edit your question to reflect that. –  Deer Hunter May 23 '13 at 10:44
show 2 more comments

closed as not constructive by Polynomial, Adnan, Terry Chia, NULLZ, Rory Alsop May 23 '13 at 14:56

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer

I suggest seeing the following "Technical Certification Roadmap"

The answer to your questions are enough to fill a book. The two (infosec and forensics) are like apples and oranges. Both fruits, each different. In forensics, depending on what you are doing, there could be life and liberty at hand if you are performing forensics with the ultimate route being, a court case. In infosec, same applies (slightly): life, privacy. (If you're working at say a SCADA based environment, one mishap could endanger life, if you're working in the medical arena, privacy comes first).

Aside from these two huge gaps, it works best to get a feel for both as they complement one another however, they are both extremely different. The companies hiring for these roles also hugely differ. For example, many huge law firms hire forensics experts for the sake of having talent on-hand to analyze cases, but have no true blue infosec program. Some Fortune N companies hire strong infosec teams and lack/substitute forensics with "incident responders." In forensics, chain of command, evidence, spoilation, etc., come first. In infosec, this is barely an afterthought.

Personally, I feel its best to understand both realms although they in themselves are VERY BROAD fields. Hence me posting the roadmap. The roadmap linked, shows the variations of "infosec" as there are many: application security, network security, infrastructure security, web security, SCADA based security. Same applies for forensics: E-Discovery, Incident Response, Privacy, Legal based (going to a trial).

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.