We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.

learn more… | top users | synonyms

1
vote
0answers
324 views

Best way to get “into the security industry”? [duplicate]

Possible Duplicate: What are the career paths in the computer security field? I've been called a "jack of all trades" guy, who has been working in health care and finance for about seven years....
6
votes
2answers
6k views

SANS training - worth it? [closed]

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying up-...
5
votes
2answers
766 views

Digital Forensics and Pentesting: what now?

So, i want to enter the security field, and i'm leaning towards security auditing, digital forensics, and reverse engineering. i'm in school right now, i'm studying x86 ASM, exploring Linux, and soon ...
5
votes
4answers
8k views

CEH or GIAC - Which one should I pursue?

After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
2
votes
1answer
2k views

Are GIAC exams open book (Unlike CISSP)?

I am currently CompTIA A+, Network+, and Security+ certified. As part of maintaining compliance with the DoDD 8570, I will also be sitting for the ISC^2 CISSP exam in the near future. I have noticed ...
4
votes
2answers
181 views

Is it correct to consider audits as exclusively “detective” in nature?

I'm studying for the CISSP exam and one of the video lecture points didn't quite make sense to me. The instructor was discussing access control administration areas and began categorizing certain ...
4
votes
4answers
747 views

Can you pass C|EH without any hands-on experience in hacking tools

I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
19
votes
7answers
18k views

Comparing online security courses: eLearnSecurity vs. Offensive-Security [closed]

I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques) I want to start studying security in-depth, but I have limited time ...
5
votes
2answers
2k views

Should I go for Master of Science by GIAC SANS and what to do with my expiring GSEC cert?

I am now concentrating on my startup which is basically a one-man show. At the same time, i just received an email from SANS Technology Institute’s (STI) about their exciting new accelerated option ...
14
votes
7answers
14k views

How useful is CISSP to a recent graduate?

I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus. I have recently acquired a copy of a CISSP study guide and ...
24
votes
10answers
21k views

Good (preferably free) resource for CISSP practice questions

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
26
votes
5answers
4k views

Professional certifications for IT Security [closed]

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist? CEH Certified Ethical Hacker ...