Questions tagged [certification]

We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.

Filter by
Sorted by
Tagged with
0
votes
0answers
56 views

Earning CPE for SANS/GIAC certification renewal through online courses

I am currently a holder of GIAC Security Essentials certificate (GSEC) that expires soon, so I'm looking for a way to renew this certificate in the most efficient way. GIAC Certification Renewal page ...
2
votes
1answer
138 views

Why is scanning considered a pre-attack and not reconnaissance?

I am studying for a CEH certificate. I have a question about a simple quiz and a book that I am reading. In the CEH book, it states that: We can scan for a target using network tools (e.g. tarcert, ...
0
votes
1answer
43 views

Guidelines to make Windows Server 2008 Common Criteria Installation

I'm new to certification arguments. I have an issue with a requirement that is to make an application in a certified Windows 2008 environment. What are / where can I find a guide to WS2008 CC-...
1
vote
0answers
32 views

Certification courses from a novice to professional [closed]

I would like to know the list of certification courses that I can start as a beginner and become proficient in the field of network security and from which website or institution can I take the ...
0
votes
2answers
76 views

Certificates with no sysadmin skills?

I am coming from a web application developer career, so no sysadmin skills. But I also like security topics. I was wondering if after getting a certification such as GIAC, GPEN or EC Council CEH, or ...
1
vote
1answer
70 views

Is a bank's affiliate that provides services to the bank issuer required to show compliance or certification to PCI DSS

Is a bank's affiliate that provides services to the bank issuer required to demonstrate compliance or certification to PCI DSS? If so, how is this typically done?
6
votes
1answer
129 views

What Certification(s) to look for in Hard Drive destruction?

Many vendors exist to pick up old (enterprise) Hardware for recycling and offer services including sanitization and destruction (shredding). The concern is that media could potentially still ...
3
votes
2answers
308 views

AppSec Developer Certifications

I've noticed that certifications seem to be a big part of the IT Security Professional (non-development), but have not seen the same attention being given/required of the software development engineer ...
4
votes
2answers
755 views

Can a security job be cracked without OSCP?

I have my B.Tech in Information Technology with CEHv8 certification. I have 2 years of vulnerability assessment experience and 1.5 years of python automation experience. I am not able to crack any ...
3
votes
1answer
353 views

What are vendor affirmed algorithms in FIPS 140-2

FIPS 140-2 allows FIPS approved algorithms to be either tested by CAVP or to be vendor affirmed. What does "vendor affirmed" imply here? Can I say my AES implementation as vendor affirmed and get it ...
2
votes
2answers
128 views

Conflicting requirements in FIPS 140-2 regarding manual key entry

Requirement 1 All output data exiting the cryptographic module via the "data output" interface shall only pass through the output data path. The output data path shall be logically disconnected ...
1
vote
0answers
33 views

Are protocol implementations also tested as part of FIPS certification?

I just went to CMVP website and opened a random FIPS certificate. https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Certificate/2898 In the FIPS certificate, FIPS algorithms ...
1
vote
0answers
66 views

Changing Horses Mid-Stream: A New Career in Technology [closed]

So, after a few years in the professional world of sales, I have finally stumbled onto something that I actually enjoy doing and being around: the wonderful world of IT. Perhaps I am crazy? Anyways, ...
25
votes
6answers
4k views

How to start with an Information Security Program?

I am a software tester, InfoSec is mostly tangential to my job, and people only ask me questions about InfoSec because I am not afraid to use Google or Stack Exchange when I don't know something. (...
1
vote
3answers
184 views

Is there any Online Certification that is worthy enough to get a Job as a Security Professional? [closed]

I am highly interested in Network and Information Security and already a good understanding of Linux. I am also good at WiFi Penetration Testing and practice a lot of that. I am wondering that is ...
1
vote
1answer
90 views

Industry Certification Question [duplicate]

I have been researching cybersecurity industry certifications for some time now and I am looking for some guidance/input on what combination of education, experience, and certification is best suited ...
0
votes
2answers
178 views

Will GCIH help me in my career path? [closed]

I am into non-functional (performance) testing for 12 years. I am planning to move to pen testing with GCIH certification. Can I get a fresh start in pen testing after this?
1
vote
1answer
2k views

Certification or Course equivalent to OSWE? [closed]

Is there any certification which focuses specifically on web application penetration, CWE issues and code analysis like Offensive Security Web Expert (OSWE) does? OSWE is not available online and it ...
2
votes
2answers
114 views

Certification 27001 Issue

My department already got certification for ISO 27001:2013 last year (2016). But for a particular reason, my department should move to new building. How would be the status for my ISO 27001:2013 ...
1
vote
0answers
48 views

Does the value of security certifications for hiring/being hired decrease for more experienced positions? [closed]

In an industry where there are a dizzying array of security certifications to be had, many of them are either entry-level certifications, or are based around a particular area of specialization (...
2
votes
2answers
140 views

How to ensure that a program is implemented as per your recommendation?

I have an security protocol whose implementation will be done by many third parties developers (lets call them as 'manufacturers') which in turn will be programmed in the embedded hardware designed by ...
0
votes
1answer
85 views

Advice on career switch [closed]

I'm an IT technical writer with 6 years of experience looking to transition to a career in information security. I have good knowledge of software, databases, and cloud computing with a year or so of ...
-3
votes
1answer
66 views

Secuirty related certification/training for .NET Developers [closed]

I would like to know if there are any Free certifications related to writing secure code that myself and our team of .NET/AngularJS web-developers take up, So that we can write secure code and also ...
6
votes
2answers
777 views

ISO 27001:2013 certification questions

Advice/opinion appreciated. Ultimately, our company would like to achieve ISO27001:2013 certification, but that is some way off. In the interim, we want to be able to get to the point whereby we can "...
0
votes
1answer
445 views

What kind of ISO 27k certifications can an individual get?

I heard that there are ISO 27K certifications. E.G. Info Security foundation based on ISO/IEC 27002. I am interested how it is possible to get a higher level, what kind of options there are to get iso ...
3
votes
1answer
3k views

ISSA vs ISACA vs (ISC)2 [closed]

I am an aspiring information security professional. I have asked various professionals in the community for advice and one common theme in responses to my inquiries is "Get to know the community!" ...
1
vote
1answer
152 views

Why is my answer to this security exam prep question incorrect?

I'm studying for a security exam and am confused by one of the chapter review questions in the book I'm using. It reads: When scanning a network via a hardline connection to a wired-switch NIC ...
2
votes
0answers
111 views

HIPAA/FISMA certification for IT audits [closed]

I currently work for an IT security company that is looking to expand our services offered to clients. Two avenues we are looking at is reviewing FISMA and HIPAA compliance for our clients. I have ...
6
votes
1answer
320 views

Who can certify RNG according NIST SP800-22?

I have written my own random number generator as a C library and I tested it on NIST Statistical Test Suite. Now I would like to get a certification to have a formal proof that my C library generates ...
2
votes
2answers
3k views

What certifications do I need to become a Malware Analyst? [closed]

I've previously posted here on how to get started as a malware analyst, and wanted to say thanks on getting me started. How much do certifications help me on my resume and which one(s) should I get? ...
0
votes
1answer
132 views

FIPS 201(-2): Central requirements for PIV?

I was recentely asked in the comments on some details on tamper-proofing of a smartcard in question. The term "FIPS-201" was used to specify what kind of details was needed. I understand that FIPS ...
-2
votes
2answers
156 views

Which is first job or certificates [closed]

Here goes a question I have in my mind after I finish my study and start looking for a job. I have visited many recruiting websites and also clicked on many career tabs on companies websites. There ...
2
votes
1answer
196 views

help developer choose correct path to go down for security certifications [duplicate]

Sorry if this is a duplicate however I felt it was a little more unique than the answers I found. Basically I am a software developer and I have moved recently into an architecture role. Throughout my ...
8
votes
3answers
8k views

Is industry experience the only way to a CREST certification?

I hope this question is direct enough for the stackexchange format, my apologies if it is not, please feel free to downvote to close. I'm interested in pursuing a CREST certification, however it ...
1
vote
1answer
112 views

Security certification of software products: what about libraries or third-party services?

How the security certification works if the software uses third party libraries or services? E.g., if someone would like to certify a software product following Common Criteria standard (let's say, ...
0
votes
3answers
8k views

what are the best security certifications for beginners with no experience in IT [closed]

I want to make a career change from administration to IT but I have absolutely no experience and no certifications in IT. I am interested in information security and networking. So what certifications ...
-1
votes
2answers
244 views

Advice - When just starting your career, what are the best certifications to eyeball? [closed]

Im just starting out in school to study Network and Info Security. I know this is the field I want to invest my time and study into. Well over 200k security jobs went unfulfilled last year. My ...
3
votes
2answers
7k views

Course Material for GPEN Certification? [closed]

I am planning for GPEN certification, although i have been extensively involved in penetration projects, still looking at the topics it seems a bit difficult.. what could be good study guide for ...
1
vote
4answers
13k views

What is the difference between active reconnaissance and scanning/enumeration

I have just started studying for CEH exam v8 and I am trying to get the core of so called hacking phases. I could not totally understand the practical difference between the first two phases. In ...
0
votes
2answers
1k views

CEH training courses requirements

What are the requirements for studying CEH? Is there any requirements for the programming background? And can anyone apply for it or does he has to have a recommendation for both studying and taking ...
2
votes
1answer
2k views

What is the relationship between Suite B and FIPS 140-2?

What is the relationship between the Suite B algorithms and FIPS 140-2 certification? Does OpenSSL meet both criteria? From what I've read, it seems that OpenSSL's crypto library implements many ...
-3
votes
1answer
165 views

Certifications comparisons

I have been asked to compare "officially" some pentest certifications, namely: GIAC CEH OPST OSCP ...and if you have some more, they're welcome! Now, I have my points of view and I don't want to ...
1
vote
2answers
406 views

Ways to certify a SaaS for security [closed]

Is it common for small companies to get security certificates/compliance from audit agencies for their SaaS to present to customers for their assurance? If so what are the suggested certifications?
1
vote
1answer
143 views

Worthy security related certifications for a software engineer [closed]

I am a software engineer with an interest in expanding my knowledge in the security field. In addition to security.stackexchange and OWASP, I am currently reading the book "The web application hacker'...
1
vote
3answers
228 views

Reading to Decide on a career switch [duplicate]

I have a strategy consulting and sales background, but what I read about IT and IT Security sounds fascinating as an outsider. I'm considering a career switch, but would need to know quite a bit more. ...
2
votes
3answers
622 views

Certifications that involve practical knowledge

After a lot of googling and searches on forums, it was apparent that certificates like CEH and CISSP incorporated a lot of theory in them and were useful as an added for job. Are there any ...
-2
votes
2answers
1k views

Evaluating candidates for Hacker/Pen Test Positions [closed]

If I need to employ Penetration Testers, what are the procedures to follow and how to examine candidates to know their skills and qualifications. Also, I need to know what are the examinations/...
10
votes
7answers
15k views

eCPPT vs. OSCP Certification

I am a soon to be college student. I am looking to become certified in pentesting for both personal interest as well as to be able to have something that would look good to future employers. Both ...
3
votes
0answers
122 views

Suggested books to study for CISSP? [duplicate]

Possible Duplicate: Good (preferably free) resource for CISSP practice questions I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP please ...
4
votes
4answers
4k views

Definitive certification list [closed]

What are a list of useful certificates for someone who wants to work on the information security field? I have heard of CISSP but from what I have understood it is way too advanced for someone new to ...