Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm a *nix sysAdmin for last 5 years. For last one year I've been engaged with PCI-DSS and SAS70 audits at our company and got introduced with Information Security. I have found my interest in InfoSec and reviewing the possibilities on career switch from sysAdmin to InfoSec.

What I've found is that three layers of skills are needed to penetrate fully in InfoSec industry. These are what I think are best for a teche person otherwise I've met some InfoSec auditors with high auditing skills but low computer security sense.

First layer is core technical skill like RHCSS, CEH, Penetration Tester, Forensic Investigator etc Second is technical policy and management stuff like CISSP from ISC2. Third is Auditing and compliance like CISA, CISM etc from ISSACA.

I need opinions from InfoSec community persons on my above thoughts. Thanks

share|improve this question

closed as not a real question by Iszi, this.josh, AviD Oct 17 '11 at 8:07

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

What's your question exactly? You'r likely to start a flamewar about the use of certifications :-) – chris Oct 6 '11 at 22:15
Welcome to the IT Security StackExchange. I strongly encourage you to read our FAQ and also any existing questions tagged career. You may find your question has already been covered in existing threads. Please note that the FAQ says this site is for "practical, answerable questions" as opposed to "open-ended questions. Generally, a question should be answerable from an objective standpoint with little to no subjectivity or "opinion" involved. Also, see the "Good Subjective, Bad Subjective" blog post: – Iszi Oct 7 '11 at 2:15

Browse other questions tagged or ask your own question.