Certification Time
For a while I have been keeping my eye on certifications I would like to obtain in the next few years. Being honest with myself it really is just a goal because it would be very costly and time consuming to obtain all of them, not impossible, just difficult. What is a life without goals? however difficult they might be. After speaking with some security professionals on [H] I have added enough certifications to keep me busy for many many years. There are a number of certifications that you really cannot pass without real world experience, one I have heard of is the CISSP, which requires four years of experience (5 years effective Oct. 2007), however two years may be waived. One of my goals is to have the credentials that would land me contracts as a white hat so getting real world security experience is a priority anyway.
Below the list of certifications I have an additional list which outlines the certifications for the DoD directive 8570.1. This directive applies to individuals administering DoD machines. Of course the major problem with certifications is maintaining them, the more certifications you have the more difficult it can be since you have to recertify every so often. The list below is a broad list of certifications I am interested in, and while I would like to have them all the list will be narrowed over time. Lets say I get my RHCT, but when looking into Solaris more, I don’t have interest in working with Solaris or the other way around, ultimately reducing the list over time.
Now for the main list of certifications:
- Certified Ethical Hacker
- Zend Certified Engineer
- CompTIA Linux+
- CompTIA Server+
- CCNA, Cisco Certified Network Associate
- Linux Professional Institute Certification (LPIC-1), Junior Level Administration
- Linux Professional Institute Certification (LPIC-2), Advanced Level Administration
- Linux Professional Institute Certification (LPIC-3), Senior Level Administration
- Sun Certified System Administrator (SCSA)
- Sun Certified Network Administrator (SCNA)
- Sun Certified Security Administrator (SCSECA)
Since Red Hat has recieved its EAL4 certification with Labeled Security Protection Profile (LSPP) I added some of the Red Hat certifications to the list
- Red Hat Certified Technician (RHCT)
- Red Hat Certified Engineer (RHCE)
- Red Hat Certified Security Specialist (RHCSS)
DoD Directive 8570.1 Technical I
- A+
- Network+
- TICSA, TruSecure Certified Security Associate
- SSCP, Systems Security Certified Practitioner
DoD Directive 8570.1 Technical II
- GSEC, GIAC Security Essentials Certification
- Security+
- SCNP, Security Certified Network Professional
- SSCP, Systems Security Certified Practitioner
DoD Directive 8570.1 Technical III
- CISSP, Certified Information Systems Security Professional
- SCNA, Security Certified Network Architect
- CISA, Certified Information System Auditor
- GSE, GIAC Security Expert
There are also a number of certifications under the SANS Global Information Assurance Certification that look very interesting. These certifications also seem to be more specific, an example being “GIAC Securing Oracle Certification” or the “GIAC Secure Internet Presence”.
One of the posters from [H] had this in his signature.
CCNA, CCNP, CCIE, CCAI, MCT, MCSE, CNE, CNI, A+, Net+, Security+, SSCP
Showing that it is very possible to obtain a grip of certifications








August 6th, 2007 at 1:55 am
The Global Information Assurance Certification (GIAC) is actually a separate corporation from SANS though they obviously try to stay in alignment. The web page is http://www.giac.org
August 6th, 2007 at 3:18 am
Stephen,
Thank you for clarifying, I missed the “SANS Institute founded the certification entity” on the wikipedia page.