I'm new in information security. I need some advices about how to start learning about this area. What are the courses I should take? From where can I start? Give me please an outline to pursue to learn about information security.


2 Answers 2


The Defensive Security Podcast put together an article on that topic - Entering The Infosec Biz.


I my self will be taking the OSCP which is now a crest equivalent this is the minimum required to get into the industry out of no where (google OSCP it will be the first result on offensive security). it depends what side of the team you are playing for... as someone else said you could go for the defensive security (booorrinnggg)

  • 1
    OSCP would be a bad choice to start with . I knew ppl with solid Infosec background who failed passing the exam I would suggest something easier, such as Security + and CEH . .
    – HSN
    Commented Feb 25, 2016 at 12:53
  • OSCP or CRT are good for security testers. Less good for secure development people, firewall analysts, etc...
    – Matthew
    Commented Feb 25, 2016 at 13:09
  • 1
    @Matthew I guess but also disagree! I suppose it depends on your level thus far, personally I think if you want to be able to protect it you need to be able to break it! ;) but I guess that would be a later thing for a developer.
    – TheHidden
    Commented Feb 25, 2016 at 13:15
  • 1
    I don't think they're bad to have, but you can certainly do a lot of useful work in the field without them. I regularly work with specialists who don't have either, but who do a lot of clever things I don't understand, and together we're able to do a lot more than either of us could individually!
    – Matthew
    Commented Feb 25, 2016 at 13:17

Not the answer you're looking for? Browse other questions tagged .